)]}'
{
  "commit": "82cba446444c982229ed41f0a6f4bf44d8e234e2",
  "tree": "b53204e448f7eee425a0d7f4aa27dee5d440bb96",
  "parents": [
    "d689790d5da963051df951255bffe46c052df348"
  ],
  "author": {
    "name": "Behdad Esfahbod",
    "email": "behdad@behdad.org",
    "time": "Fri Apr 17 16:15:46 2026 -0600"
  },
  "committer": {
    "name": "Behdad Esfahbod",
    "email": "behdad@behdad.org",
    "time": "Fri Apr 17 16:17:42 2026 -0600"
  },
  "message": "[gpu] Fix out-of-bounds read in emit_all_clip_sub_blobs\n\nWhen clip nesting exceeds HB_GPU_PAINT_MAX_CLIP_DEPTH (3),\npush_clip_glyph sets unsupported\u003dtrue but still increments\nclip_depth.  emit_all_clip_sub_blobs then iterated clip_depth\nwithout capping, reading past the fixed-size clip_stack array.\n\nCap the iteration at HB_GPU_PAINT_MAX_CLIP_DEPTH.\n\nFixes: https://oss-fuzz.com/testcase-detail/6573156621156352\n\nAssisted-by: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "76050cf74019fd243209ec7c375d60a38444e818",
      "old_mode": 33188,
      "old_path": "src/hb-gpu-paint.cc",
      "new_id": "f83bad85cad0e747f5ceb6a7d0e575e8c039dfba",
      "new_mode": 33188,
      "new_path": "src/hb-gpu-paint.cc"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "980c5e217cceeff8931c59b9e0b00bf47da4cf76",
      "new_mode": 33188,
      "new_path": "test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-gpu-fuzzer-6573156621156352"
    }
  ]
}
