• Show log

    Commit

  • Hash : 112527dd
    Author : Werner Lemberg
    Date : 2022-01-22T11:45:30

    [sfnt] Reject malformed SVG tables.
    
    * src/sfnt/ttsvg.c (SVG_TABLE_HEADER_SIZE, SVG_DOCUMENT_RECORD_SIZE,
    SVG_DOCUMENT_LIST_MINIMUM_SIZE, SVG_MINIMUM_SIZE): New macros.
    (tt_face_load_svg): Check offsets.
    Check table and record sizes.
    
    Reported as
    
      https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43918