[freetype] Remove zlib and libpng dev packages. (#4597)

The upstream build of the fuzzer currently builds freetype --without-zlib
and --without-png so these are not needed. In addition, because of the
way these dependencies are used they must be built with the sanitizer in
order to detect interesting issues like CVE-2020-15999, where FreeType
may call into libpng incorrectly but it is libpng which actually does
the reads and writes. This has been proposed upstream at
https://github.com/freetype/freetype2-testing/pull/86 which uses
prefixes to ensure that the system symbols are never used, but it would
be beneficial to not have them available at all.
This commit is contained in:
bungeman 2020-11-04 14:01:18 -05:00 committed by GitHub
parent 80dda19d4f
commit d83e3f543d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 2 deletions

View File

@ -20,10 +20,8 @@ RUN apt-get update && \
apt-get install -y \ apt-get install -y \
autoconf \ autoconf \
cmake \ cmake \
libpng-dev \
libtool \ libtool \
pkg-config \ pkg-config \
zlib1g-dev \
make make
# Get some files for the seed corpus # Get some files for the seed corpus