• Show log

    Commit

  • Hash : 0b62c1e4
    Author : Dominik Röttsches
    Date : 2022-10-18T14:45:43

    [sfnt] Additional bounds checks for `COLR` v1 table handling.
    
    * src/sfnt/ttcolr.c (read_paint): Add `colr` argument, necessary for...
    ... another use of `ENSURE_READ_BYTES`.
    Update callers.
    (tt_face_get_paint_layers): Ensure that the 4-byte paint table
    offset can be read.
    
    This is a follow-up to !124 and issue
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52404