chore: cherry-pick 4af9de9806 and 115eccc0c6 from chromium. #27494
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
====
[OTS] Backport maxp sanitization
Backport [1] to perform additional sanitization on maxp values.
[1] khaledhosny/ots#227
(cherry picked from commit 6d0e7d799a46336c6bc297d4075a27dd0e7c235d)
Bug: 1153329
Change-Id: I4bc2288574802559f6c9c67a52b6dfcd8cc7467a
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2588339
Auto-Submit: Dominik Röttsches drott@chromium.org
Commit-Queue: Kenichi Ishibashi bashi@chromium.org
Reviewed-by: Koji Ishii kojii@chromium.org
Reviewed-by: Kenichi Ishibashi bashi@chromium.org
Cr-Original-Commit-Position: refs/heads/master@{#836679}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2620800
Commit-Queue: Dominik Röttsches drott@chromium.org
Commit-Queue: Anders Hartvoll Ruud andruud@chromium.org
Reviewed-by: Anders Hartvoll Ruud andruud@chromium.org
Cr-Commit-Position: refs/branch-heads/4324@{#1620}
Cr-Branched-From: c73b5a651d37a6c4d0b8e3262cc4015a5579c6c8-refs/heads/master@{#827102}
====
[ots] Backport of "[glyf] Guard access to maxp version 1 field"
(cherry picked from commit fac68744a85e8c601f60f1ef73a6e9ddf150855e)
Bug: 1153329, 1158774
Change-Id: I6acd298f841f92a751f606d710415fe32343825f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2593261
Commit-Queue: Kenichi Ishibashi bashi@chromium.org
Reviewed-by: Kenichi Ishibashi bashi@chromium.org
Auto-Submit: Dominik Röttsches drott@chromium.org
Cr-Original-Commit-Position: refs/heads/master@{#837353}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2621064
Commit-Queue: Dominik Röttsches drott@chromium.org
Commit-Queue: Anders Hartvoll Ruud andruud@chromium.org
Reviewed-by: Anders Hartvoll Ruud andruud@chromium.org
Cr-Commit-Position: refs/branch-heads/4324@{#1625}
Cr-Branched-From: c73b5a651d37a6c4d0b8e3262cc4015a5579c6c8-refs/heads/master@{#827102}
Release Notes
Notes: backported the fix to chromium:1153329.