diff options
| author | Raph Levien <raph@google.com> | 2016-01-06 14:31:23 -0800 |
|---|---|---|
| committer | The Android Automerger <android-build@google.com> | 2016-02-26 16:56:13 -0800 |
| commit | 013771f6e806f9dc32ec4318dd4e1ddd79be0878 (patch) | |
| tree | 9e639f4e9b93dc3249a42c6c2e7f638d9bf9cce5 /libs/minikin/GraphemeBreak.cpp | |
| parent | e4c07b52019e1f12beac171017b15360cdf67641 (diff) | |
| download | android_frameworks_minikin-013771f6e806f9dc32ec4318dd4e1ddd79be0878.tar.gz android_frameworks_minikin-013771f6e806f9dc32ec4318dd4e1ddd79be0878.tar.bz2 android_frameworks_minikin-013771f6e806f9dc32ec4318dd4e1ddd79be0878.zip | |
Reject fonts with invalid ranges in cmap
A corrupt or malicious font may have a negative size in its cmap
range, which in turn could lead to memory corruption. This patch
detects the case and rejects the font, and also includes an assertion
in the sparse bit set implementation if we missed any such case.
External issue:
https://code.google.com/p/android/issues/detail?id=192618
Bug: 26413177
Change-Id: Icc0c80e4ef389abba0964495b89aa0fae3e9f4b2
Diffstat (limited to 'libs/minikin/GraphemeBreak.cpp')
0 files changed, 0 insertions, 0 deletions