[HarfBuzz] NULL dereference in hb_apply_context_t

Kenichi Ishibashi bashi at chromium.org
Sun Sep 2 23:31:40 PDT 2012


Hi Behdad,

The current revision can crash when you reach arabic_fallback_shape()

In arabic_fallback_shape():
...
OT::hb_apply_context_t c (font, buffer, 1/*global mask*/, NULL);
...

The last argument is NULL, but the constructor of hb_apply_context_t
de-references the last argument.

Looks like the last argument (hb_set_digest_t) doesn't matter in this
function. Patch to fix the crash is attached.

Thanks,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/harfbuzz/attachments/20120903/69f61eed/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: avoid-null-deref.diff
Type: application/octet-stream
Size: 576 bytes
Desc: not available
URL: <http://lists.freedesktop.org/archives/harfbuzz/attachments/20120903/69f61eed/attachment.obj>


More information about the HarfBuzz mailing list