commit 639a02154b36fea925a145061138385164932c4c
author Werner Lemberg <wl@gnu.org> Tue Jan 11 09:14:48 2022 +0100
committer Werner Lemberg <wl@gnu.org> Tue Jan 11 09:14:48 2022 +0100
tree 7ccac3de7bbf8f13e89c1d714c51c28a53622650
parent 33626164e8eacef4856b8358c49fdf09c5d98162

* src/type42/t42objs.c (T42_Open_Face): Avoid use of uninitialized memory.

Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43508

src/type42/t42objs.c

diff --git a/src/type42/t42objs.c b/src/type42/t42objs.c
index 03955e9..53fe9b2 100644
--- a/src/type42/t42objs.c
+++ b/src/type42/t42objs.c
@@ -44,7 +44,8 @@
 
     parser = &loader.parser;
 
-    if ( FT_QALLOC( face->ttf_data, 12 ) )
+    /* To handle buggy fonts we don't use `FT_QALLOC` here. */
+    if ( FT_ALLOC( face->ttf_data, 12 ) )
       goto Exit;
 
     /* while parsing the font we always update `face->ttf_size' so that */