[ENOMEM] unchecked resize in CFF2.

4 years ago · 7f358a55f4
parent 32f052b033
commit 7f358a55f4
2 changed files with 2 additions and 1 deletions
--- a/src/hb-ot-cff2-table.hh
+++ b/src/hb-ot-cff2-table.hh
@ -441,7 +441,8 @@ struct cff2
      { fini (); return; }

      fdCount = fdArray->count;
-      privateDicts.resize (fdCount);
+      if (!privateDicts.resize (fdCount))
+      { fini (); return; }

      /* parse font dicts and gather private dicts */
      for (unsigned int i = 0; i < fdCount; i++)
--- a/test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-5181909018345472
+++ b/test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-5181909018345472