* src/psaux/cffdecode.c (cff_operator_seac): Fix numeric overflow.

Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16470
5 years ago · 9adc3b35f1
parent 7d1d3b9a0e
commit 9adc3b35f1
2 changed files with 9 additions and 1 deletions
--- a/8
+++ b/8
@ -1,3 +1,11 @@
+2019-08-26  Werner Lemberg  <wl@gnu.org>
+
+	* src/psaux/cffdecode.c (cff_operator_seac): Fix numeric overflow.
+
+	Reported as
+
+	  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16470
+
 2019-08-26  Werner Lemberg  <wl@gnu.org>

 	[type1] Fix `FT_Get_Var_Axis_Flags' (#56804).
--- a/src/psaux/cffdecode.c
+++ b/src/psaux/cffdecode.c
@ -330,7 +330,7 @@
    builder->left_bearing.x = 0;
    builder->left_bearing.y = 0;

-    builder->pos_x = adx - asb;
+    builder->pos_x = SUB_LONG( adx, asb );
    builder->pos_y = ady;

    /* Now load `achar' on top of the base outline. */