[truetype] Fix UBSan warning on offset to nullptr (#57501).

* src/truetype/ttinterp.c (Ins_CALL): Fail if `exc->FDefs' is null.
5 years ago · 10d8de7541
parent a4df0373c7
commit 10d8de7541
2 changed files with 9 additions and 0 deletions
--- a/6
+++ b/6
@ -1,3 +1,9 @@
+2020-01-02  Dominik Röttsches  <drott@chromium.org>
+
+	[truetype] Fix UBSan warning on offset to nullptr (#57501).
+
+	* src/truetype/ttinterp.c (Ins_CALL): Fail if `exc->FDefs' is null.
+
 2019-12-31  Nikhil Ramakrishnan  <ramakrishnan.nikhil@gmail.com>

 	[woff2] Allow bitmap-only fonts (#57394).
--- a/src/truetype/ttinterp.c
+++ b/src/truetype/ttinterp.c
@ -3965,6 +3965,9 @@
    if ( BOUNDSL( F, exc->maxFunc + 1 ) )
      goto Fail;

+    if ( !exc->FDefs )
+      goto Fail;
+
    /* Except for some old Apple fonts, all functions in a TrueType */
    /* font are defined in increasing order, starting from 0.  This */
    /* means that we normally have                                  */