[bzip2] Avoid use of uninitialized memory. * src/bzip2/ftbzip2.c (FT_Stream_OpenBzip2): Don't use `FT_QNEW` but `FT_NEW` for setting up `zip` to avoid uninitialized memory access while handling malformed PCF fonts later on. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42800
diff --git a/src/bzip2/ftbzip2.c b/src/bzip2/ftbzip2.c index 296cea0..7049794 100644 --- a/src/bzip2/ftbzip2.c +++ b/src/bzip2/ftbzip2.c
@@ -481,7 +481,9 @@ FT_ZERO( stream ); stream->memory = memory; - if ( !FT_QNEW( zip ) ) + /* Don't use `FT_QNEW` here to avoid problems with uninitialized */ + /* memory later on if the font is malformed. */ + if ( !FT_NEW( zip ) ) { error = ft_bzip2_file_init( zip, stream, source ); if ( error )