tree d75cb3f4051b3a81caf5b97c087f2ef2b57cf9ab
parent 8667042997cb9095d3c925417b29f5a3163ab352
author Werner Lemberg <wl@gnu.org> 1496743504 +0200
committer Werner Lemberg <wl@gnu.org> 1496743504 +0200

[cff] Integer overflow.

Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2109
  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2110
  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2122

* src/cff/cf2blues.c (cf2_blues_init): Use OVERFLOW_SUB_INT32.

* src/cff/cf2hints.c (cf2_hintmap_map): Synchronize if-else
branches.