Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
NULL pointer dereference in the dumpcffnames() function #4090
While fuzzing FontForge with AFL, I found a NULL pointer dereference in the dumpcffnames() function, in tottf.c.
Attaching a reproducer (gzipped so GitHub accepts it): test06.sfd.gz
Issue can be reproduced in FontForge 20190801 and with latest Git master by running:
…ta() function Fix for fontforge#4086 NULL pointer dereference in the SFDGetSpiros() function Fix for fontforge#4088 NULL pointer dereference in the SFD_AssignLookups() function Add empty sf->fontname string if it isn't set, fixing fontforge#4089 fontforge#4090 and many other potential issues (many downstream calls to strlen() on the value).