Re: [ft-devel] Fwd: Issue 977845 in chromium: pdf_font_fuzzer: Integer-overflow in compute_glyph_metrics

[Werner LEMBERG]

> I'm not sure what exactly points of discussion are, but in HarfBuzz
> we do purposefully ignore position overflows.  We use a macro like
> this for that:
> 
> #define HB_NO_SANITIZE_SIGNED_INTEGER_OVERFLOW
> __attribute__((no_sanitize("signed-integer-overflow")))
> 
> If you want to copy the macro, please copy its surrounding
> conditions as well.

For my taste, it is too imprecise, since the attribute can only be set
function-wise.  You can find the discussion somewhere in
freetype-devel, IIRC.


    Werner