| commit | 3802ca8b643dbc966d12ef11ed8e2e5893cabef2 | [log] [tgz] |
|---|---|---|
| author | Werner Lemberg <wl@gnu.org> | Fri Jun 02 08:44:20 2017 +0200 |
| committer | Werner Lemberg <wl@gnu.org> | Fri Jun 02 08:44:20 2017 +0200 |
| tree | 2ea7a11970b43fbe531744d0e93bc0df2da5a56c | |
| parent | cd02d359a6d0455e9d16b87bf9665961c4699538 [diff] |
[cff] Fix integer overflows. Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2027 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2028 * src/cff/cf2hints.c (cf2_hintmap_insertHint), src/cff/cf2intrp.c (cf2_doFlex): Use OVERFLOW_ADD_INT32 and OVERFLOW_SUB_INT32.