[cff] Fix numeric overflow.

Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10988 * src/cff/cffparse.c (cff_parser_run) [CFF_CONFIG_OPTION_OLD_ENGINE]: Use `NEG_LONG'.
6 years ago · ba62f9d8f5
parent acb19ed4e9
commit ba62f9d8f5
2 changed files with 12 additions and 1 deletions
--- a/11
+++ b/11
@ -1,3 +1,14 @@
+2018-10-29  Werner Lemberg  <wl@gnu.org>
+
+	[cff] Fix numeric overflow.
+
+	Reported as
+
+	  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10988
+
+	* src/cff/cffparse.c (cff_parser_run)
+	[CFF_CONFIG_OPTION_OLD_ENGINE]: Use `NEG_LONG'.
+
 2018-10-27  Alexei Podtelezhnikov  <apodtele@gmail.com>

 	[sfnt] Make `head' timestamps unsigned.
--- a/src/cff/cffparse.c
+++ b/src/cff/cffparse.c
@ -1259,7 +1259,7 @@

          if ( *stack < 0 )
          {
-            num = (FT_ULong)-*stack;
+            num = (FT_ULong)NEG_LONG( *stack );
            neg = 1;
          }
          else