harfbuzz

Commit Graph

Author	SHA1	Message	Date
Garret Rieger	5ca353a2d0	[subset] fix heap buffer overflow found by fuzzer.	4 years ago
Behdad Esfahbod	33a0f0b686	[test] Remove fuzzed test font that triggers virus alert Fixes https://github.com/harfbuzz/harfbuzz/issues/2750	4 years ago
Garret Rieger	f94bf9f06f	[set fuzzer] limit the total number of set members in a fuzzing input. Currently the fuzzer can create arbitarily long inputs which once big enough will trigger a timeout.	4 years ago
Garret Rieger	a4c3732f59	[ENOMEM] fix set clear() causing corruption if the set is in_error().	4 years ago
Khaled Hosny	5091ea7e24	Merge pull request #2733 from astiob/buffer-context-doc [docs] Describe buffer context applicability more explicitly	4 years ago
Garret Rieger	bbbcad0dbb	Revert "[ENOMEM] don't perform set process operations if the other set is in an error state." This reverts commit `f3929abafe`.	4 years ago
Garret Rieger	f3929abafe	[ENOMEM] don't perform set process operations if the other set is in an error state. Running a process while the other set is in an error state can potentially corrupt this sets map map (for example by overwritting all of the major values with 0).	4 years ago
Garret Rieger	8c3d4de796	[subset] Fix integer underflow in ContextFormat2.	4 years ago
Garret Rieger	9825e3dd2e	[ENOMEM] fix access to unitialized memory. If the serialize() call fails to write the object then we can't safely read varstore_prime fields. Fixes https://oss-fuzz.com/testcase-detail/5137462782066688.	4 years ago
ebraminio	1e48225ca3	[ENOMEM] Check whether serialize context isn't in error	4 years ago
Ebrahim Byagowi	6e32145dc9	[meson] Make compatbile with 0.47.0	4 years ago
Garret Rieger	9562239f05	[ENOMEM] check for error in lookup visited set.	4 years ago
Garret Rieger	6f754852c1	[ENOMEM] skip asserts in to_bias if serializer is in an error state.	4 years ago
Ebrahim Byagowi	057769b1a3	[fuzzer] minor	4 years ago
Ebrahim Byagowi	0417938011	[fuzzer] Mark alloc_state as unused It is really unused when failing-alloc isn't on.	4 years ago
Ebrahim Byagowi	5193357832	Revert "Remove autotools build support" This reverts commit `01ac32aab2`.	4 years ago
Ebrahim Byagowi	ffe06c8f04	[glyf] Guard all the public APIs against null pool runs Fixes https://crbug.com/oss-fuzz/24575 and https://crbug.com/oss-fuzz/24737	4 years ago
Ebrahim Byagowi	01ac32aab2	Remove autotools build support	4 years ago
Ebrahim Byagowi	679fac87df	Skip hb_shape if buffer object is immutable	4 years ago
Garret Rieger	18ab8029d5	[ENOMEM] check vector status in cmap subsetting.	4 years ago
Garret Rieger	06dbb6acbb	[ENOMEM] in GSUB ChainContext subsetting check maps for allocation errors.	4 years ago
Garret Rieger	fb1477795c	[ENOMEM] Check result of vector resize in CBDT subsetting.	4 years ago
Ebrahim Byagowi	efd716de3f	[cff] Check for scalars array resize result Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24504	4 years ago
Garret Rieger	040ed094ef	[ENOMEM] popragate packed/packed_map errors to the serializer. Will disable further modifications based on a bad state.	4 years ago
Garret Rieger	7f358a55f4	[ENOMEM] unchecked resize in CFF2.	4 years ago
Garret Rieger	32f052b033	[ENOMEM] Fix several instances of not checking resize in CFF.	4 years ago
Garret Rieger	15644ee60e	[ENOMEM] fix memory leak if allocation fails during pop_pack().	4 years ago
Garret Rieger	42237adffc	[ENOMEM] make serializer modification operations no-ops if it's in an error state.	4 years ago
Garret Rieger	4ba8e3c6fd	[ENOMEM] Fix failure to check calloc return. Fixes https://oss-fuzz.com/testcase-detail/6246465148813312.	4 years ago
Garret Rieger	d307c24abf	[ENOMEM] check resize() return. Fixes https://oss-fuzz.com/testcase-detail/5641892164009984.	4 years ago
Ebrahim Byagowi	48ad745996	[ENOMEM] Fix buffer's content check logic So now rest of shape fuzzer also can be enabled. Fixes #2571	4 years ago
Ebrahim Byagowi	c33e8006fd	[fuzz] Implement failing allocator	4 years ago
Ebrahim Byagowi	5c46683ab8	[fuzz] increase shape fuzzer timeout as https://circleci.com/gh/harfbuzz/harfbuzz/149203	4 years ago
Ebrahim Byagowi	945bcd7230	minor	4 years ago
Ebrahim Byagowi	fa0436ddd1	[ENOMEM][fuzzer/subset] early return if the result is null I don't see _or_fail APIs idiomatic for the project but since it is there, let's have this	4 years ago
Ebrahim Byagowi	11d583a9ea	[aat] Consume glyph insertion from buffer's max_ops (#2223 ) Glyph insertion is an expensive operation and we like to have it limited based on buffer's input size which is handled by buffer's max_ops. clusterfuzz-testcase-minimized-harfbuzz_fuzzer-5754958982021120: Before the change: 0.67s user 0.00s system 99% cpu 0.674 total After the change: 0.02s user 0.00s system 98% cpu 0.024 total Which takes much longer on valgrind and tsan bots.	4 years ago
Ebrahim Byagowi	cd6f62d960	[meson] Raise timeout value of subset fuzzer testcases happens when tsan is enabled	4 years ago
Ebrahim Byagowi	e4f9969108	[ci] migrate to meson two bots, one bot here (distcheck) and one in travis still run autotools and won't be removed till we decide about autotools	4 years ago
Ebrahim Byagowi	e04050e3b8	[meson] split fuzzer_ldflags before use	4 years ago
Ebrahim Byagowi	c5def34730	[meson] don't underscorify fuzzers names	4 years ago
Ebrahim Byagowi	d608f2ac85	[meson] Add fuzzer_ldflags As ots, https://github.com/khaledhosny/ots/commit/4d37b9b	4 years ago
Ebrahim Byagowi	a470b0b205	Minor, disable strict-aliasing warning in set fuzzer ../test/fuzzing/hb-set-fuzzer.cc: In function ‘int LLVMFuzzerTestOneInput(const uint8_t*, size_t)’: ../test/fuzzing/hb-set-fuzzer.cc:38:82: warning: dereferencing type-punned pointer will break strict-aliasing rules [-Wstrict-aliasing] 38 \| const instructions_t &instructions = reinterpret_cast<const instructions_t &> (data); \| And it is already disabled at project level so let's disable it here also.	4 years ago
Ebrahim Byagowi	a07672d353	[py] minor, replace os.environ.get with os.getenv	4 years ago
Ebrahim Byagowi	47a0fbec31	[meson] Mark longer tests with slow So one can skip them easily by `meson test -Cbuild --no-suite slow`	4 years ago
Ebrahim Byagowi	0881611778	[fuzzer] Make some use for test_font API calls Making some use for result of some of the test_font calls to make sure compilers in fuzzers aren't just optimizing the calls.	4 years ago
Christoph Reiter	03bd6ead44	[meson] Only pass required dependencies to everything Instead of passing dependencies as required we used one giant shared dependency list containing all dependencies for every library/executable. While this kinda works, the specified deps are also used for generating the pkg-config files and this leads to lots of Requires.private and Libs.private entries which aren't really needed. This removes the "deps" array and replaces it with a few smaller ones and makes sure the public libraries only get passed the dependencies actually needed. Fixes #2441	5 years ago
Ebrahim Byagowi	a9d13463b5	[meson] Categorize tests using `suite: [...]` So one can run a category of interested tests like meson test -Cbuild --suite aots --suite src --print-errorlogs Intead issuing particular tests which also is possible like meson test -Cbuild test-shape --print-errorlogs	5 years ago
Ebrahim Byagowi	7554f618ec	minor, use sys.exit print shorthand	5 years ago
Ebrahim Byagowi	f7562672f9	[meson] Use / instead join_paths We need some of the very recent features of meson, let's use the new features also	5 years ago
Ebrahim Byagowi	b8d1760bc0	[meson/ci] Increase cmap fuzzer timeout even more	5 years ago

5 Commits (b39c1f7829bb6c7a69eb783e579246fdb627cd94)