[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[freetype2] master 6d04bd9: [truetype] Integer overflow (#52082).
From: |
Werner LEMBERG |
Subject: |
[freetype2] master 6d04bd9: [truetype] Integer overflow (#52082). |
Date: |
Thu, 21 Sep 2017 15:23:04 -0400 (EDT) |
branch: master
commit 6d04bd991bf4ab1c77f0cffe2f317920d00b6c46
Author: Werner Lemberg <address@hidden>
Commit: Werner Lemberg <address@hidden>
[truetype] Integer overflow (#52082).
* src/truetype/ttinterp.c (Ins_MDRP): Avoid FT_ABS.
---
ChangeLog | 6 ++++++
src/truetype/ttinterp.c | 5 +++--
2 files changed, 9 insertions(+), 2 deletions(-)
diff --git a/ChangeLog b/ChangeLog
index f789721..69e6275 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,11 @@
2017-09-21 Werner Lemberg <address@hidden>
+ [truetype] Integer overflow (#52082).
+
+ * src/truetype/ttinterp.c (Ins_MDRP): Avoid FT_ABS.
+
+2017-09-21 Werner Lemberg <address@hidden>
+
[sfnt] Fix postscript name for default instance of variation fonts.
Problem reported by Behdad.
diff --git a/src/truetype/ttinterp.c b/src/truetype/ttinterp.c
index c3d7103..e3c8f12 100644
--- a/src/truetype/ttinterp.c
+++ b/src/truetype/ttinterp.c
@@ -6078,8 +6078,9 @@
/* single width cut-in test */
- if ( FT_ABS( org_dist - exc->GS.single_width_value ) <
- exc->GS.single_width_cutin )
+ /* |org_dist - single_width_value| < single_width_cutin */
+ if ( org_dist < exc->GS.single_width_value + exc->GS.single_width_cutin ||
+ org_dist > exc->GS.single_width_value - exc->GS.single_width_cutin )
{
if ( org_dist >= 0 )
org_dist = exc->GS.single_width_value;
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [freetype2] master 6d04bd9: [truetype] Integer overflow (#52082).,
Werner LEMBERG <=