| commit | 9b710cd56eb66c379686e82d7fe371c212aebc37 | [log] [tgz] |
|---|---|---|
| author | Werner Lemberg <wl@gnu.org> | Tue May 30 22:35:41 2017 +0200 |
| committer | Werner Lemberg <wl@gnu.org> | Tue May 30 22:35:41 2017 +0200 |
| tree | 283db99521eefba393c8b3143bf2274668d8a9d7 | |
| parent | 0e7b9f864f517dfe0bc37419c037dd299fdd2a27 [diff] |
[cff] 32bit integer overflow run-time errors 1/2 (#46149). This commit handles the old engine. * src/cff/cffgload.c: Include FT_INTERNAL_CALC_H. (cff_decoder_parse_charstrings): Use OVERFLOW_ADD_LONG and OVERFLOW_SUB_LONG where needed. * src/cff/cffparse.c: Include FT_INTERNAL_CALC_H. (power_ten_limits): New static array. (do_fixed): Use it to prevent multiplication overflow. (cff_parser_run): Use OVERFLOW_ADD_LONG.