[truetype] Integer overflow issues.

Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7739 * src/truetype/ttinterp.c (Ins_CEILING): Use FT_PIX_CEIL_LONG.
7 years ago · 2a1597826a
parent 632a11f91f
commit 2a1597826a
2 changed files with 11 additions and 1 deletions
--- a/10
+++ b/10
@ -1,3 +1,13 @@
+2018-04-17  Werner Lemberg  <wl@gnu.org>
+
+	[truetype] Integer overflow issues.
+
+	Reported as
+
+	  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7739
+
+	* src/truetype/ttinterp.c (Ins_CEILING): Use FT_PIX_CEIL_LONG.
+
 2018-04-16  Werner Lemberg  <wl@gnu.org>

 	[truetype] Integer overflow issues.
--- a/src/truetype/ttinterp.c
+++ b/src/truetype/ttinterp.c
@ -2954,7 +2954,7 @@
  static void
  Ins_CEILING( FT_Long*  args )
  {
-    args[0] = FT_PIX_CEIL( args[0] );
+    args[0] = FT_PIX_CEIL_LONG( args[0] );
  }