KolibriOS/kolibrios
15
21
Fork 36
Code Issues 129 Pull Requests 31 Actions 1 Projects 1 Releases Wiki Activity

Fix potential vulnerable cloned function #299

Closed
npt-1707 wants to merge 1 commits from npt-1707/kolibrios:fix_CVE-2014-9666 into main
pull from: npt-1707/kolibrios:fix_CVE-2014-9666
merge into: KolibriOS:main
Conversation 1 Commits 1 Files Changed 1 +5 -3
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
contrib/sdk/sources/freetype/src/sfnt/ttsbit.c
View File

@@ -234,9 +234,11 @@
p += 34;
decoder->bit_depth = *p;
if ( decoder->strike_index_array > face->sbit_table_size ||
decoder->strike_index_array + 8 * decoder->strike_index_count >
face->sbit_table_size )
/* decoder->strike_index_array + */
/* 8 * decoder->strike_index_count > face->sbit_table_size ? */
if ( decoder->strike_index_array > face->sbit_table_size ||
decoder->strike_index_count >
( face->sbit_table_size - decoder->strike_index_array ) / 8 )
error = FT_THROW( Invalid_File_Format );
}