shithub: freetype+ttf2subf

Info  •  Files  •  Log  •  Branches

* src/sfnt/pngshim.c (Load_SBit_Png): Fix memory leak (#59322).

The issue is that `rows` is allocated but will not be freed in the
event that the call to `png_read_image` fails and calls `longjmp`.

git/fs: mount .git/fs: mount/attach disallowed

--- a/ChangeLog

+++ b/ChangeLog

@@ -1,3 +1,10 @@

+2020-10-23  Ben Wagner  <bungeman@google.com>

+

+	* src/sfnt/pngshim.c (Load_SBit_Png): Fix memory leak (#59322).

+

+	The issue is that `rows` is allocated but will not be freed in the

+	event that the call to `png_read_image` fails and calls `longjmp`.

+

 2020-10-20  Werner Lemberg  <wl@gnu.org>

 	* Version 2.10.4 released.

--- a/src/sfnt/pngshim.c

+++ b/src/sfnt/pngshim.c

@@ -443,6 +443,7 @@

     png_read_end( png, info );

   DestroyExit:

+    FT_FREE( rows );

     png_destroy_read_struct( &png, &info, NULL );

     FT_Stream_Close( &stream );