tree 3d69e90ee48c2f1ddf9977c626997bf5e1904876
parent fde91ab8f19d1f789720afc67e0414a0244490d3
author Ben Wagner <bungeman@chromium.org> 1634824118 -0400
committer Alexei Podtelezhnikov <apodtele@gmail.com> 1634824118 -0400

[cff] Commit vstore data and regions on allocation.

The vstore->regionCount and vstore->dataCount were read directly
from the data. However, vstore->varRegionList and vstore->varData
would still contain uninitialized entries with uninitialized
pointers in the event of an error, leading to issues when attempting
to clean up.

Reportd as
  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40104

* src/cff/cffload.c (cff_vstore_load): Read the region and data counts
into locals and update the vstore counts immediately after each entry
becomes free-able.