Index: third_party/harfbuzz-ng/src/hb-open-type-private.hh |
diff --git a/third_party/harfbuzz-ng/src/hb-open-type-private.hh b/third_party/harfbuzz-ng/src/hb-open-type-private.hh |
index 5616f04deec7d687281249b4896bc896fa38a763..477d9e28b2c8a1487dd5e58ea395136d58f96e5d 100644 |
--- a/third_party/harfbuzz-ng/src/hb-open-type-private.hh |
+++ b/third_party/harfbuzz-ng/src/hb-open-type-private.hh |
@@ -194,6 +194,7 @@ struct hb_sanitize_context_t |
{ |
this->start = hb_blob_get_data (this->blob, NULL); |
this->end = this->start + hb_blob_get_length (this->blob); |
+ assert (this->start <= this->end); /* Must not overflow. */ |
this->edit_count = 0; |
this->debug_depth = 0; |