| commit | 4dc00cf5c045074c5a324a1c87d166ba1ad728c3 | [log] [tgz] |
|---|---|---|
| author | Werner Lemberg <wl@gnu.org> | Fri Jun 16 13:33:09 2017 +0200 |
| committer | Werner Lemberg <wl@gnu.org> | Fri Jun 16 13:33:09 2017 +0200 |
| tree | e32deab68f39d3bb720da93ef11b6ee5bfbc5f3d | |
| parent | dbeb7bce7f76cdd786ce4022e0b45a653f68db5d [diff] |
[truetype] Integer overflows. Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2270 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2278 * src/truetype/ttinterp.c (Ins_MDRP, _iup_worker_interpolate): Use ADD_LONG and SUB_LONG.