* src/base/ftobjs.c (ft_glyphslot_preset_bitmap): Fix integer

overflow. Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3539
8 years ago · c3083e4595
parent 2e58808d48
commit c3083e4595
2 changed files with 11 additions and 2 deletions
--- a/9
+++ b/9
@ -1,3 +1,12 @@
+2017-10-05  Werner Lemberg  <wl@gnu.org>
+
+	* src/base/ftobjs.c (ft_glyphslot_preset_bitmap): Fix integer
+	overflow.
+
+	Reported as
+
+	  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3539
+
 2017-10-05  Werner Lemberg  <wl@gnu.org>

 	Fix compiler warnings.
--- a/src/base/ftobjs.c
+++ b/src/base/ftobjs.c
@ -419,8 +419,8 @@
      cbox.yMax = FT_PIX_CEIL( cbox.yMax );
    }

-    x_shift -= cbox.xMin;
-    y_shift -= cbox.yMin;
+    x_shift = SUB_LONG( x_shift, cbox.xMin );
+    y_shift = SUB_LONG( y_shift, cbox.yMin );

    x_left = cbox.xMin >> 6;
    y_top  = cbox.yMax >> 6;