harfbuzz

Commit Graph

Author	SHA1	Message	Date
Garret Rieger	6627a1ab45	[repacker] Add a initial seed for the fuzzer repacker.	2 years ago
Garret Rieger	deca30b268	[repacker] get repacker fuzzer working. Additionally add helper method that allows a graph to be saved as a fuzzer seed.	2 years ago
Garret Rieger	261a605f9c	[repacker] verify graph is a dag before using the fuzzer input.	2 years ago
Garret Rieger	985b19f678	[repacker] begin implementing a fuzzer for the repacker api.	2 years ago
Garret Rieger	dd1ba328a8	[repacker] fix fuzzer timeout. For https://oss-fuzz.com/testcase-detail/5845846876356608. Only process the set of unique overflows.	2 years ago
Behdad Esfahbod	e854739b2d	[fuzzing] Add test font for previous commit	2 years ago
Qunxin Liu	7fde6ab025	fuzzer fix: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49790	3 years ago
Khaled Hosny	afe6629b2f	Fix make dist	3 years ago
Behdad Esfahbod	e68e874da6	Update test/fuzzing/README	3 years ago
Behdad Esfahbod	bdbb8c297e	Add test for previous commit	3 years ago
Behdad Esfahbod	e2cc34e190	[subset/GPOS] Fix a fuzzer timeout test Fixes https://oss-fuzz.com/testcase-detail/5234369031176192	3 years ago
Behdad Esfahbod	4cb83967aa	[subset/ClassDefFormat2] Fix timeout Fixes https://oss-fuzz.com/testcase-detail/5417800474165248	3 years ago
Behdad Esfahbod	32c85b8c8c	[avar2] Fix mapping when coords length don't match Ouch. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49407	3 years ago
Behdad Esfahbod	9eab3ac72d	[CoverageFormat2] Remove hand-written loop While on a fuzzer-found test case (added) that loop was faster, on real fonts, including NotoNastaliq in our benchmark, it was actually slower, which intuitively I would have expected. Still no idea why on that fuzzer case it's faster though. :(	3 years ago
Behdad Esfahbod	3c84aa8416	[cff] Add a max work counter Set to 10,000 per interpretation right now. Fixes https://github.com/harfbuzz/harfbuzz/issues/3700 Fixes https://oss-fuzz.com/testcase-detail/5667125715927040	3 years ago
Behdad Esfahbod	b8c7c0a0e6	[fuzzer] In 50% of runs don't fail the allocator	3 years ago
Garret Rieger	311413f16b	[subset] Fix fuzzer issue. Fixes https://oss-fuzz.com/testcase-detail/5693568490012672. new_index should be set from new_index2 when the entry is present in the map.	3 years ago
Behdad Esfahbod	62e803b361	[sbix] Limit glyph extents Fixes https://github.com/harfbuzz/harfbuzz/issues/3557	3 years ago
Behdad Esfahbod	5a058ba158	[shape-fuzzer] Add commented out more buffer-verify option Those currently fail and I've been unable to debug them. I tried two, passing them to hb-shape doesn't reproduce the failure. :(	3 years ago
Behdad Esfahbod	189f65344a	[fuzz-shape] Verify shape output Let the fuzzers loose on shape verify.	3 years ago
Garret Rieger	8f9f0c494b	[subset] Enforce cmap12 group ordering constraints in collect_mapping. Fixes fuzzer issue: https://oss-fuzz.com/testcase-detail/6365271012540416	3 years ago
Garret Rieger	b051f3fa83	[subset] Fix cpal subsetting when there are partial palette overlaps. The existing code doesn't correctly handle the case where palettes partially overlap in the color record array. This changes the subsetting to only share entries in the color record array when palettes have the same first color index. Partially overlapping palettes will be converted to disjoint segments in the color record array. Updates one of the color tests to use multiple palettes. Also fixes fuzzer: https://oss-fuzz.com/testcase-detail/5568200165687296.	3 years ago
Behdad Esfahbod	ca8a0f3ea3	[gvar] Protect against out-of-range access Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47281 Fixes https://oss-fuzz.com/testcase-detail/5508865908670464	3 years ago
Behdad Esfahbod	a665e29ed7	[use] Avoid O(n^2) in the machine Fixes https://github.com/harfbuzz/harfbuzz/issues/3502	3 years ago
Behdad Esfahbod	03085132ba	[buffer] Fix out-buffer under memory-alloc failure This was broken in July refactoring of the buffer, and exposed to ReverseChainSingleSubstFormat1 in `3807061d63` Fixes: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38800 https://bugs.chromium.org/p/chromium/issues/detail?id=1303552	3 years ago
Behdad Esfahbod	151f205819	[draw] Emit move_to immediately, like other operators	3 years ago
Behdad Esfahbod	f1a9a9ccaf	[draw-state] Pass state down to callbacks	3 years ago
Behdad Esfahbod	1740916ede	[draw] Remove check for no-op This is unnecessary overhead. Up to rasterizers to handle this. Plus, this throws off point-numbers in uses that rely on it. Disabled one test that broke with this.	3 years ago
Behdad Esfahbod	8b4f429000	[draw] Virtualize hb_font_draw_glyph() into hb_font_get_glyph_shape() To be implemented in hb-ft.	3 years ago
Behdad Esfahbod	2bed4f46fb	[draw] Fix draw signatures	3 years ago
Behdad Esfahbod	08e1096609	[draw-fuzzer] Fix signatures	3 years ago
Behdad Esfahbod	e0ac6c587b	Remove remaining traces of HB_EXPERIMENTAL_API	3 years ago
Behdad Esfahbod	af407dd24d	Add a fuzzer font	3 years ago
Garret Rieger	4e2f409bce	[subset] Don't hold references to members of the active_glyph_stack. These references may get invalidated after the vector for the stack is resized. Fixes: https://oss-fuzz.com/testcase-detail/5422577634377728	3 years ago
Behdad Esfahbod	61856359cb	[fuzz] Disable verification for now.	3 years ago
Behdad Esfahbod	6596e42d16	[fuzz] Verify shape results	3 years ago
luz paz	e2e305066a	Fix various typos Found via `codespell -q 3 -S ./perf/texts -L actualy,ba,beng,fo,gir,inout,nd,ot,pres,ro,te,teh,timne`	3 years ago
Garret Rieger	87496bf63e	[subset] fix fuzzer timeout if visisted_paint goes into error.	3 years ago
Garret Rieger	067f90a820	[subset] Fix for fuzzer timeout. Fixes https://oss-fuzz.com/testcase-detail/5549945449480192 In prune_langsys: move LangSys visited check up before any work is done for a LangSys. In this particular case the compare() method is responsible for the majority of the time spent and wasn't being guarded with a visisted check.	3 years ago
Garret Rieger	c4573c2ec7	[repacker] don't infinite loop if visited or roots is in error. Fixes https://oss-fuzz.com/testcase-detail/5205038086094848	3 years ago
Khaled Hosny	69d8f27c69	[meson] Require 0.55.0 We implicitly require it for building ragel subproject. This new version requirement should satisfied in both Fedora 33 and Debian bullseye, and not be too cutting edge for us.	3 years ago
Garret Rieger	ace98cc65f	[subset] Only sanitize recursion depth in COLR.	3 years ago
Garret Rieger	f51b48c8e7	[subset] Fix fuzzer found memory leak. Happens because an insert into a map with an invalid key reports successful, but this causes the set being inserted to be lost.	3 years ago
Qunxin Liu	0a7563a53f	[subset] fuzzer fix: https://oss-fuzz.com/testcase?key=6254792024915968 Make sure input is valid, each gid has a corresponding offset value in the map	3 years ago
Qunxin Liu	85deddb16e	[subset] fuzzer fix: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40406	3 years ago
Qunxin Liu	794b00db4b	[subset] fuzzer fix: https://oss-fuzz.com/testcase-detail/6616166961905664	3 years ago
Garret Rieger	74f96d9d4b	[repacker] fix heap use after free in repacker. Don't store a reference to the link in overflow records as the link object may be freed if the sorted graph vector is resized.	3 years ago
Garret Rieger	fb07f8f876	During subset input creation check for set alloc failures and fail if encountered.	4 years ago
Garret Rieger	dc31920bbe	Don't serialize null offsets in CPAL. Fixes https://oss-fuzz.com/testcase-detail/5443213648330752	4 years ago
Garret Rieger	c0f3af91b8	[subset] speed up add_gid_and_children and adjust op limit. Fix for fuzzer timeout: https://oss-fuzz.com/testcase-detail/5001604901240832. - Operation limit is per glyph, so 100,000 should still be far more than needed. - Switches from for(...) to while(...) loop for iteration. for(...) calls it.end() which in this case triggers a complete iteration. - Cache CompositeGlyph size in the iterator to avoid needing to recalculate it.	4 years ago

1 2 3

139 Commits (b5de54e1d49701073c1a9356c5e689e135cd8aec)