| commit | eaa9adf325e1612bdc7134648205597d055cb99c | [log] [tgz] |
|---|---|---|
| author | Werner Lemberg <wl@gnu.org> | Wed Sep 20 08:00:05 2017 +0200 |
| committer | Werner Lemberg <wl@gnu.org> | Wed Sep 20 08:00:05 2017 +0200 |
| tree | b5cd313f64b0c29b0872ea3d343d56e9e7ae0a6a | |
| parent | 74f442394f4cafccf31ea47f8708a77772cf179a [diff] |
[truetype] Integer overflows. Changes triggered by https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3429 * src/truetype/ttinterp.c (Ins_SHPIX, Ins_DELTAP): Use NEG_LONG. (Ins_MIAP): Use SUB_LONG.