tree 9e639f4e9b93dc3249a42c6c2e7f638d9bf9cce5
parent e4c07b52019e1f12beac171017b15360cdf67641
author Raph Levien <raph@google.com> 1452119483 -0800
committer The Android Automerger <android-build@google.com> 1456534573 -0800

Reject fonts with invalid ranges in cmap

A corrupt or malicious font may have a negative size in its cmap
range, which in turn could lead to memory corruption. This patch
detects the case and rejects the font, and also includes an assertion
in the sparse bit set implementation if we missed any such case.

External issue:
https://code.google.com/p/android/issues/detail?id=192618

Bug: 26413177
Change-Id: Icc0c80e4ef389abba0964495b89aa0fae3e9f4b2