tree 3129db6d7e285e4a9760f50d6fdf46d749bc08fa
parent addb2dddb6fd4be32ea16b44831e4cc99bbc9693
author Werner Lemberg <wl@gnu.org> 1496601788 +0200
committer Werner Lemberg <wl@gnu.org> 1496601788 +0200

[cff, truetype] Integer overflows.

Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2075
  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2088

* src/cff/cf2font.c (cf2_font_setup): Use OVERFLOW_MUL_INT32.

* src/truetype/ttinterp.c (Ins_ISECT): Use OVERFLOW_MUL_LONG,
OVERFLOW_ADD_LONG, and OVERFLOW_SUB_LONG.