| commit | d3dc2da9b27af5b90575d62989389cc65fe7977c | [log] [tgz] |
|---|---|---|
| author | Ben Wagner <bungeman@chromium.org> | Wed Jun 30 18:22:29 2021 -0400 |
| committer | Werner Lemberg <wl@gnu.org> | Thu Jul 01 07:02:04 2021 +0200 |
| tree | bed9b0d1fb40a6c5ff9b0d07d0a63eb8eda7de80 | |
| parent | 286da6c528ace3443d993370c798cdc09011200b [diff] |
* src/truetype/ttgxvar.c (tt_set_mm_blend): Test `coords`. It is undefined behavior to pass `NULL` to `memcpy`. `coords' is passed to `memcpy` but `TT_Get_MM_Blend` and `TT_Get_Var_Design` explictly call `tt_set_mm_blend` with `coords` as `NULL`. In addition, `TT_Set_MM_Blend` has a similar possible issue.