* src/sfnt/sfdriver.c (sfnt_get_var_ps_name): Check `result'.

Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10316
6 years ago · a5818ed1e1
parent 6b53300b01
commit a5818ed1e1
2 changed files with 9 additions and 1 deletions
--- a/8
+++ b/8
@ -1,3 +1,11 @@
+2018-09-13  Werner Lemberg  <wl@gnu.org>
+
+	* src/sfnt/sfdriver.c (sfnt_get_var_ps_name): Check `result'.
+
+	Reported as
+
+	  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10316
+
 2018-09-12  John Tytgat  <John.Tytgat@esko.com>

 	[sfnt] Better PS name handling (#54629).
--- a/src/sfnt/sfdriver.c
+++ b/src/sfnt/sfdriver.c
@ -841,7 +841,7 @@
                                   sfnt_is_alphanumeric,
                                   0 );

-      len = ft_strlen( result );
+      len = result ? ft_strlen( result ) : 0;

      /* sanitize if necessary; we reserve space for 36 bytes (a 128bit  */
      /* checksum as a hex number, preceded by `-' and followed by three */