commit | ca799e9be52526739691f120285a27b91fd15d68 | [log] [tgz] |
---|---|---|
author | Werner Lemberg <wl@gnu.org> | Mon Jul 03 06:27:52 2017 +0200 |
committer | Werner Lemberg <wl@gnu.org> | Mon Jul 03 06:27:52 2017 +0200 |
tree | 0c330fc35706def34a35c0d660325f39a0ebaf26 | |
parent | abeb28f161bc11be4fcdb8af50ab4b736d34a3e5 [diff] |
[truetype] Integer overflow. Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2455 * src/truetype/ttinterp.c (Ins_SCFS): Use SUB_LONG.