commit f41945e313ca053253bfd339186b87c977da3bf3
author Behdad Esfahbod <behdad@behdad.org> Mon Mar 21 18:24:30 2022 -0600
committer Behdad Esfahbod <behdad@behdad.org> Mon Mar 21 18:24:30 2022 -0600
tree f482eb33c1049bd4c69a552e56799f0c1d7d11ab
parent 03085132bac6bb3f69378cab3eaf5a57ad1362ff

[cmap] In collect_unicodes() of format 12/13, limit to max Unicode

Fixes fuzzer timeout:
https://oss-fuzz.com/testcase-detail/5062368881672192

src/hb-ot-cmap-table.hh

diff --git a/src/hb-ot-cmap-table.hh b/src/hb-ot-cmap-table.hh
index fde57cd..a8747ee 100644
--- a/src/hb-ot-cmap-table.hh
+++ b/src/hb-ot-cmap-table.hh
@@ -714,7 +714,7 @@
       if (unlikely ((unsigned int) (gid + end - start) >= num_glyphs))
 	end = start + (hb_codepoint_t) num_glyphs - gid;
 
-      out->add_range (start, end);
+      out->add_range (start, hb_min (end, 0x10FFFFu));
     }
   }
 
@@ -883,7 +883,7 @@
       hb_codepoint_t first = arrayZ[i].startUnicodeValue;
       hb_codepoint_t last = hb_min ((hb_codepoint_t) (first + arrayZ[i].additionalCount),
 				    (hb_codepoint_t) HB_UNICODE_MAX);
-      out->add_range (first, last);
+      out->add_range (first, hb_min (last, 0x10FFFFu));
     }
   }