kc3-lang/freetype

diff --git a/ChangeLog b/ChangeLog
index 6f2ca3f..ce5bf8e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,11 @@
+2018-08-13  Werner Lemberg  <wl@gnu.org>
+
+	* src/type42/t42parse.c (t42_parse_sfnts): One more format check.
+
+	Reported as
+
+	  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9832
+
 2018-08-11  Werner Lemberg  <wl@gnu.org>
 
 	* src/base/ftcalc.c (FT_Matrix_Check): Fix integer overflow.
diff --git a/src/type42/t42parse.c b/src/type42/t42parse.c
index edd27a8..04690f5 100644
--- a/src/type42/t42parse.c
+++ b/src/type42/t42parse.c
@@ -595,6 +595,14 @@
 
       else if ( *cur == '<' )
       {
+        if ( string_buf && !allocated )
+        {
+          FT_ERROR(( "t42_parse_sfnts: "
+                     "can't handle mixed binary and hex strings\n" ));
+          error = FT_THROW( Invalid_File_Format );
+          goto Fail;
+        }
+
         T1_Skip_PS_Token( parser );
         if ( parser->root.error )
           goto Exit;