[psaux] Guard and trace AFM kern data allocation

System Internals / FreeType - Werner Lemberg [gnu.org] - 25 May 2021 09:27 UTC

Reported as

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31543

- include/freetype/internal/fttrace.h: Add 'afmparse' trace component.

- src/psaux/afmparse.c (FT_COMPONENT): Define. (afm_parse_track_kern, afm_parse_kern_pairs): Protect against allocations bombs. Add tracing. (afm_parse_kern_data): Don't allow multiple kern data sections.

0d1c306e5 [psaux] Guard and trace AFM kern data allocation.
ChangeLog | 17 +++++
include/freetype/internal/fttrace.h | 1 +
src/psaux/afmparse.c | 124 +++++++++++++++++++++++++++++++++---
3 files changed, 133 insertions(+), 9 deletions(-)

Upstream: git.savannah.gnu.org


  • Share