Code: hb_buffer_clear (hb_buffer_t *buffer)
 {
   buffer->have_output = FALSE;
   buffer->have_positions = FALSE;
   buffer->len = 0;
   buffer->out_len = 0;
   buffer->i = 0;
  buffer->max_lig_id = 0;
   buffer->max_lig_id = 0;
 }

Vulnerability Type: DoS Exec Code
CWE ID: 
Summary: The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.
Commit Message: 