[HarfBuzz] potential crash in sanitizer code

Behdad Esfahbod behdad at behdad.org
Wed Jul 21 13:37:52 PDT 2010


Fixed.  Thanks.

behdad

On 07/20/10 10:16, Jonathan Kew wrote:
> Hi Behdad,
> 
> We've run across a case where the sanitizer crashes (division by zero) on invalid data. This happens if *none* of the possible fields are actually specified as present in ValueFormat, so that the record_size passed to check_array() is zero.
> 
> Suggested patch attached. This allows a record_size of zero; although the ValueRecord is pointless if it has no content, the table still seems to be structurally valid AFAICT.
> 
> JK
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> HarfBuzz mailing list
> HarfBuzz at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/harfbuzz



More information about the HarfBuzz mailing list