Skip to content

[colr] Ensure enough bytes for PaintColrLayers

Ben Wagner requested to merge bungeman/freetype:fix_reading_paintcolrlayers into master
  • src/sfnt/ttcolr.c (read_paint): check that there are five additional bytes to be read when reading PaintColrLayers.

Reported as

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66566

Merge request reports