Fix another sanitize bug

Also discovered by "libFuzzer".
harfbuzz · Oct 9, 2015 · ee9b0b6 · ee9b0b6
1 parent 34379b4
commit ee9b0b6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/hb-open-type-private.hh b/src/hb-open-type-private.hh
@@ -920,7 +920,7 @@ struct ArrayOf
   inline bool sanitize_shallow (hb_sanitize_context_t *c) const
   {
     TRACE_SANITIZE (this);
-    return_trace (c->check_struct (this) && c->check_array (this, Type::static_size, len));
+    return_trace (c->check_struct (this) && c->check_array (array, Type::static_size, len));
   }
 
   public: