File libass-CVE-2016-7972.patch of Package libass

Overview Repositories Revisions Requests Users Attributes Meta

File libass-CVE-2016-7972.patch of Package libass

From aa54e0b59200a994d50a346b5d7ac818ebcf2d4b Mon Sep 17 00:00:00 2001
From: Grigori Goronzy <greg@chown.ath.cx>
Date: Tue, 4 Oct 2016 02:35:26 +0200
Subject: [PATCH] shaper: fix reallocation

Update the variable that tracks the allocated size. This potentially
improves performance and avoid some side effects, which lead to
undefined behavior in some cases.

Fixes fuzzer test case id:000051,sig:11,sync:fuzzer3,src:004221.
---
 libass/ass_shaper.c | 1 +
 1 file changed, 1 insertion(+)

Index: libass-0.10.2/libass/ass_shaper.c
===================================================================
--- libass-0.10.2.orig/libass/ass_shaper.c
+++ libass-0.10.2/libass/ass_shaper.c
@@ -96,6 +96,7 @@ static void check_allocations(ASS_Shaper
         shaper->ctypes     = realloc(shaper->ctypes, sizeof(FriBidiCharType) * new_size);
         shaper->emblevels  = realloc(shaper->emblevels, sizeof(FriBidiLevel) * new_size);
         shaper->cmap       = realloc(shaper->cmap, sizeof(FriBidiStrIndex) * new_size);
+	shaper->n_glyphs = new_size;
     }
 }

Places

File libass-CVE-2016-7972.patch of Package libass

Places