Merge pull request #18760 from calixteman/bug1919513
Read a signed integer when using PUSHW in sanitizing a font (bug 1919513)
This commit is contained in:
commit
652e3e0d76
@ -2387,7 +2387,7 @@ class Font {
|
|||||||
} else {
|
} else {
|
||||||
for (j = 0; j < n; j++) {
|
for (j = 0; j < n; j++) {
|
||||||
b = data[i++];
|
b = data[i++];
|
||||||
stack.push((b << 8) | data[i++]);
|
stack.push(signedInt16(b, data[i++]));
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
} else if (op === 0x2b && !tooComplexToFollowFunctions) {
|
} else if (op === 0x2b && !tooComplexToFollowFunctions) {
|
||||||
|
|||||||
1
test/pdfs/.gitignore
vendored
1
test/pdfs/.gitignore
vendored
@ -668,3 +668,4 @@
|
|||||||
!issue18694.pdf
|
!issue18694.pdf
|
||||||
!issue18693.pdf
|
!issue18693.pdf
|
||||||
!bug1918115.pdf
|
!bug1918115.pdf
|
||||||
|
!bug1919513.pdf
|
||||||
|
|||||||
BIN
test/pdfs/bug1919513.pdf
Executable file
BIN
test/pdfs/bug1919513.pdf
Executable file
Binary file not shown.
@ -10482,5 +10482,13 @@
|
|||||||
"rounds": 1,
|
"rounds": 1,
|
||||||
"link": true,
|
"link": true,
|
||||||
"type": "eq"
|
"type": "eq"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"id": "bug1919513",
|
||||||
|
"file": "pdfs/bug1919513.pdf",
|
||||||
|
"md5": "83d1a7fab2c81e632910c334879e7334",
|
||||||
|
"rounds": 1,
|
||||||
|
"talos": false,
|
||||||
|
"type": "eq"
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user