File harfbuzz-sanitize-fix.patch of Package harfbuzz
From ee9b0b6cb5fdb08671ab064f26c299135f828260 Mon Sep 17 00:00:00 2001
From: Behdad Esfahbod <behdad@behdad.org>
Date: Fri, 9 Oct 2015 14:23:15 -0400
Subject: [PATCH] Fix another sanitize bug
Also discovered by "libFuzzer".
Backported by Mike Gorse <mgorse@suse.com>
---
diff -urp harfbuzz-1.0.3.orig/src/hb-open-type-private.hh harfbuzz-1.0.3/src/hb-open-type-private.hh
--- harfbuzz-1.0.3.orig/src/hb-open-type-private.hh 2015-08-21 06:44:14.587207983 -0500
+++ harfbuzz-1.0.3/src/hb-open-type-private.hh 2016-08-05 17:04:57.766662331 -0500
@@ -900,7 +900,7 @@ struct ArrayOf
inline bool sanitize_shallow (hb_sanitize_context_t *c) const
{
TRACE_SANITIZE (this);
- return TRACE_RETURN (c->check_struct (this) && c->check_array (this, Type::static_size, len));
+ return TRACE_RETURN (c->check_struct (this) && c->check_array (array, Type::static_size, len));
}
public: