harfbuzz

Commit Graph

Author	SHA1	Message	Date
Garret Rieger	333946b00e	[subset] Fix fuzzer timeout. Fixes https://oss-fuzz.com/testcase-detail/5458896606855168. Limit iteration over coverage in MarkLigPosFormat1 subsetting to the number of glyphs in the liga array.	1 year ago
Qunxin Liu	9ceb800ac2	fuzzer fix https://oss-fuzz.com/testcase-detail/5842152921628672 Access TupleVariationData through blob, because we don't sanitize var_data	1 year ago
Qunxin Liu	fd3eb2c672	fuzzer fix: https://oss-fuzz.com/testcase-detail/6032126569742336	1 year ago
Garret Rieger	a1f034eaac	[repacker] fix fuzzer failure. Fixes: https://oss-fuzz.com/testcase-detail/6490945267564544	1 year ago
Garret Rieger	ca906e8747	[repacker] fix fuzzer timeout. Corrects some mistakes in the handling of incoming_edges_ when memory allocation failures happen.	1 year ago
Behdad Esfahbod	94d4283b12	[graph] Handle a malloc fail Fixes https://oss-fuzz.com/testcase-detail/4579249263345664	1 year ago
Behdad Esfahbod	997986ab30	[subset/hvar] Error handling Fixes https://oss-fuzz.com/testcase-detail/5029952234586112	1 year ago
Behdad Esfahbod	f60dbd906a	Fix thinko Fixes https://oss-fuzz.com/testcase-detail/4787105656864768	1 year ago
Behdad Esfahbod	25297408de	[COLR] Fix PaintComposite sanitize timeout Was timing out after recent sanitize() change. Fixes https://oss-fuzz.com/testcase-detail/5692635449524224	1 year ago
Behdad Esfahbod	0cf759b0d4	[Glyph] Don't shift anchored Composite if phantom_only Fixes https://oss-fuzz.com/testcase-detail/5114131137822720	1 year ago
Behdad Esfahbod	cc44b3bce0	[subset/cff1] Handle an error condition Fixes https://oss-fuzz.com/testcase-detail/5191907895279616	1 year ago
Behdad Esfahbod	62f5ed461e	[subset/cff] Fix an infinite loop Fixes https://oss-fuzz.com/testcase-detail/5419002026131456	1 year ago
Behdad Esfahbod	347b944811	[null] Fix getting Crap(hb_bytes_t) Fixes https://oss-fuzz.com/testcase-detail/6187272924692480	1 year ago
Behdad Esfahbod	6c4f975dcb	Add a fuzzer font	1 year ago
Garret Rieger	db700b5670	[subset] fix fuzzer timeout. Fixes: https://oss-fuzz.com/testcase-detail/6681253479579648. Limits iteration of coverage table during MATH subset to valid glyphs.	1 year ago
Behdad Esfahbod	2e6919d526	[subset/cff2] Error handling Fixes https://oss-fuzz.com/testcase-detail/4916785942757376	1 year ago
Behdad Esfahbod	d08aee5a7e	Add fuzzing test	1 year ago
Behdad Esfahbod	ada1e9a924	[graph/serialize] Handle empty blob Fixes https://oss-fuzz.com/testcase-detail/4877513265119232	1 year ago
Behdad Esfahbod	a92b288e65	[serializer] Handle snapshotting when current is nullptr Happens with memory failure / fuzzing. Fixes https://oss-fuzz.com/testcase-detail/6292420615340032	1 year ago
Behdad Esfahbod	c2eaedd2cd	[fuzzing] Add a test font From https://oss-fuzz.com/testcase-detail/5855710991482880	1 year ago
Garret Rieger	f3b4d35f36	[subset] Fix fuzzer crash. https://oss-fuzz.com/testcase-detail/6608005089853440	1 year ago
Garret Rieger	20c564bc76	[repacker] Fix fuzzer memory leak. https://oss-fuzz.com/testcase-detail/6419865171525632	1 year ago
Garret Rieger	a652281ed6	[subset] Fix fuzzer timeout. Fixes https://oss-fuzz.com/testcase-detail/5979721620652032. Timeout was caused by degenerate map insert behaviour due to poor integer hash function. Presize the map to avoid it. Also fixes collect_mapping() for cmap format 13.	1 year ago
Garret Rieger	db23be642f	[subset] clamp head Min/Max values to fit within 16 bit signed int. Fixes fuzzer https://oss-fuzz.com/testcase-detail/4549472192692224.	2 years ago
Garret Rieger	b3fed4fa64	[repacker] fix fuzzer found memory leak. Fixes https://oss-fuzz.com/testcase-detail/5196242811748352	2 years ago
Garret Rieger	2175f5d050	[subset] Fix inefficient ItemVariationStore subsetting w/ retain_gids. ItemVariationStore is relying on the assumption that the inner_map is populated for all output glyphs, this is not true for subsetting operations with retain gids enabled. Fixes fuzzer timeout: https://oss-fuzz.com/testcase-detail/4575222591520768.	2 years ago
Garret Rieger	647b024784	[subset] Fix fuzzer issue https://oss-fuzz.com/testcase-detail/6521393809588224	2 years ago
Garret Rieger	2cd81fdfb6	[subset] fix memory leak. Fixes fuzzer issue https://oss-fuzz.com/testcase-detail/6169920089227264	2 years ago
Garret Rieger	be87200106	[subset] fix buffer overflow fuzzer reported issue.	2 years ago
Garret Rieger	79ae6b657f	[subset] Fix fuzzer found memory leaks.	2 years ago
Garret Rieger	f0f7f22525	[subset] fix fuzzer found null deref. https://oss-fuzz.com/testcase-detail/5844352760152064	2 years ago
Garret Rieger	3d05b96181	[subset] track which glyphs have allocated memory so we can clean up correctly. Fixes https://oss-fuzz.com/testcase-detail/5388270411579392	2 years ago
Garret Rieger	7a87b17742	Check for failed subset input creation in the fuzzer.	2 years ago
Garret Rieger	28b05e1cb6	[subset] Fix memory leak in glyf subset. Fixes fuzzer issue: https://oss-fuzz.com/testcase-detail/6525813890875392.	2 years ago
Garret Rieger	9286e12525	Don't subset a glyf table with an unknown format. Fixes fuzzer issue: https://oss-fuzz.com/testcase-detail/4875306193518592	2 years ago
Behdad Esfahbod	2d33a6b4df	[subset-fuzzer] Protect against overflow Fixes https://github.com/harfbuzz/harfbuzz/issues/4137#issuecomment-1448994447	2 years ago
Garret Rieger	c0fac016dc	[subset] update the subset fuzzer to be able to reach instancing code.	2 years ago
Garret Rieger	918193ebf9	[subset] fix a class of fuzzer timeouts caused by large shared coverage tables. More acurately estimates the op count for CoverageFormat2 tables as the population size instead of the size in bytes.	2 years ago
Behdad Esfahbod	64fa5cd482	[GPOS] Fix assert fail introduced recently Was introduced in `8708b9e081`. If these lookups are recursed to from (Chain)Context out-of-order, it was possible that last_base > buffer->idx, in which case we were attaching marks to a base after them... and an assertion was failing fortunately. Fixes https://oss-fuzz.com/testcase-detail/6377756666757120	2 years ago
Garret Rieger	e4fff64ce3	[repacker] check duplicate() for success. Fixes fuzzer testcase https://oss-fuzz.com/testcase-detail/5475787333828608.	2 years ago
Behdad Esfahbod	b63159e8bf	[PairPosFormat1] Fix stride Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55287 and generally the lookup with MediumTypes.	2 years ago
Behdad Esfahbod	3c972867b9	More s/hb_font_get_glyph_shape/hb_font_draw_glyph/	2 years ago
Chun-wei Fan	4622be7f84	test/fuzzing: Fix dist We need to dist the repacker fuzzer test items into the tarball, along with the items in graphs/ and sets/.	2 years ago
Garret Rieger	40342c9437	[subset] check for addition overflow in hdmx size calculation. Fixes https://oss-fuzz.com/testcase-detail/4877336988483584.	2 years ago
Garret Rieger	b5acde43ed	[subset] check pending/subsetted tag sets for alloc failure.	2 years ago
Garret Rieger	35233d2514	[repacker] fix fuzzer reported stack overflow. Fixes https://oss-fuzz.com/testcase-detail/6014493291577344.	2 years ago
Garret Rieger	b17fbc200b	[repacker] use memcpy to avoid alignment issues.	2 years ago
Garret Rieger	f1d3489388	[repacker] bail on failure to alloc assigned_bytes set. Fixes fuzzer issue https://oss-fuzz.com/testcase-detail/5390364397928448.	2 years ago
Garret Rieger	239a5aca02	[repacker] don't allow references to the null object in graph. Fixes fuzzer issue https://oss-fuzz.com/testcase-detail/6714085985353728	2 years ago
Garret Rieger	16f61a1c87	[repacker] only build repacker fuzzer when experimental api is enabled.	2 years ago

1 2 3

145 Commits (36f5e654a641824271f26c814705590bd45ffea0)