Commit 1f4e5bcb19eaa9170466c8d845edfd11aba54937

Werner Lemberg 2019-10-03T21:07:16

* src/sfnt/sfwoff2 (reconstruct_font): Fix reallocation. Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17966

diff --git a/ChangeLog b/ChangeLog
index c65dcb8..1246f16 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,11 @@
+2019-10-03  Werner Lemberg  <wl@gnu.org>
+
+	* src/sfnt/sfwoff2 (reconstruct_font): Fix reallocation.
+
+	Reported as
+
+	  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17966
+
 2019-10-01  Alexei Podtelezhnikov  <apodtele@gmail.com>
 
 	* src/base/ftstroke.c (ft_stroker_inside): Speed up.
diff --git a/src/sfnt/sfwoff2.c b/src/sfnt/sfwoff2.c
index 3f5b00e..32a797b 100644
--- a/src/sfnt/sfwoff2.c
+++ b/src/sfnt/sfwoff2.c
@@ -1706,6 +1706,9 @@
     if ( !error )
       error = FT_THROW( Invalid_Table );
 
+    /* Set pointer of sfnt stream to its correct value. */
+    *sfnt_bytes = sfnt;
+
     FT_FREE( table_entry );
     FT_Stream_Close( stream );
     FT_FREE( stream );