kc3-lang/freetype

• Browse

  Commit

• Author : Dominik Röttsches
  Date : 2022-10-17 18:18:49
  Hash : 04272824
  Message : [sfnt] Guard individual `COLR` v1 paint field reads. * src/sfnt/ttcolr.c (ENSURE_READ_BYTES): New macro. (read_paint): Use it – after the start pointer `p` has been checked for whether it allows reading the format byte, each successive paint table field read need to be bounds-checked before reading further values. Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52404