diff --git a/ChangeLog b/ChangeLog index 5447fc4fc..f7f2d6891 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,9 @@ +2020-01-02 Dominik Röttsches + + [truetype] Fix UBSan warning on offset to nullptr (#57501). + + * src/truetype/ttinterp.c (Ins_CALL): Fail if `exc->FDefs' is null. + 2019-12-31 Nikhil Ramakrishnan [woff2] Allow bitmap-only fonts (#57394). diff --git a/src/truetype/ttinterp.c b/src/truetype/ttinterp.c index dca11d739..56cf53bde 100644 --- a/src/truetype/ttinterp.c +++ b/src/truetype/ttinterp.c @@ -3965,6 +3965,9 @@ if ( BOUNDSL( F, exc->maxFunc + 1 ) ) goto Fail; + if ( !exc->FDefs ) + goto Fail; + /* Except for some old Apple fonts, all functions in a TrueType */ /* font are defined in increasing order, starting from 0. This */ /* means that we normally have */