[HarfBuzz] harfbuzz: Branch 'master' - 3 commits

[Behdad Esfahbod]

 dev/null                    |binary
 src/hb-aat-layout-common.hh |    3 ++-
 src/hb-buffer.cc            |    2 ++
 3 files changed, 4 insertions(+), 1 deletion(-)

New commits:
commit 2e7c716511e8b2cfcd059fa2a2ed4cdd48b351bf
Author: Behdad Esfahbod <behdad at behdad.org>
Date:   Tue Oct 16 18:35:03 2018 -0700

    [buffer] Add an assert
    
    See if it helps debugging https://bugs.chromium.org/p/chromium/issues/detail?id=895117

diff --git a/src/hb-buffer.cc b/src/hb-buffer.cc
index 1d3b602b..00e7e149 100644
--- a/src/hb-buffer.cc
+++ b/src/hb-buffer.cc
@@ -359,6 +359,8 @@ hb_buffer_t::replace_glyphs (unsigned int num_in,
 {
   if (unlikely (!make_room_for (num_in, num_out))) return;
 
+  assert (idx + num_in <= len);
+
   merge_clusters (idx, idx + num_in);
 
   hb_glyph_info_t orig_info = info[idx];
commit 5842756b1398253d38749c4c8a23a1450e642caf
Author: Behdad Esfahbod <behdad at behdad.org>
Date:   Tue Oct 16 18:28:55 2018 -0700

    [fuzzing] Delete blink fuzzed data
    
    These are text, not font.

diff --git a/test/fuzzing/fonts/clusterfuzz-testcase-minimized-blink_harfbuzz_shaper_fuzzer-5099655095123968 b/test/fuzzing/fonts/clusterfuzz-testcase-minimized-blink_harfbuzz_shaper_fuzzer-5099655095123968
deleted file mode 100644
index cc30fcb7..00000000
Binary files a/test/fuzzing/fonts/clusterfuzz-testcase-minimized-blink_harfbuzz_shaper_fuzzer-5099655095123968 and /dev/null differ
commit 25fe7e7e1031401d38db1efed360cd75ea7910b9
Author: Behdad Esfahbod <behdad at behdad.org>
Date:   Tue Oct 16 18:22:54 2018 -0700

    [aat] Comment

diff --git a/src/hb-aat-layout-common.hh b/src/hb-aat-layout-common.hh
index 9a4cf73c..37f6d03c 100644
--- a/src/hb-aat-layout-common.hh
+++ b/src/hb-aat-layout-common.hh
@@ -292,7 +292,8 @@ struct Lookup
   } u;
   public:
   DEFINE_SIZE_MIN (0); /* 0 min size, makes sure this cannot be used on null pool,
-			  because Format0 has unbounded size depending on num_glyphs. */
+			* because Format0 has unbounded size depending on num_glyphs.
+			* We cannot define custom null bytes for a template :(. */
 };