Fix Savannah bug #30361.
* src/truetype/ttinterp.c (Ins_IUP): Fix bounds check.
This commit is contained in:
parent
c73e160517
commit
888cd1843e
|
@ -1,3 +1,9 @@
|
||||||
|
2010-07-08 Werner Lemberg <wl@gnu.org>
|
||||||
|
|
||||||
|
Fix Savannah bug #30361.
|
||||||
|
|
||||||
|
* src/truetype/ttinterp.c (Ins_IUP): Fix bounds check.
|
||||||
|
|
||||||
2010-07-06 Werner Lemberg <wl@gnu.org>
|
2010-07-06 Werner Lemberg <wl@gnu.org>
|
||||||
|
|
||||||
Pacify compiler.
|
Pacify compiler.
|
||||||
|
|
|
@ -6755,8 +6755,8 @@
|
||||||
end_point = CUR.pts.contours[contour] - CUR.pts.first_point;
|
end_point = CUR.pts.contours[contour] - CUR.pts.first_point;
|
||||||
first_point = point;
|
first_point = point;
|
||||||
|
|
||||||
if ( CUR.pts.n_points <= end_point )
|
if ( BOUNDS ( end_point, CUR.pts.n_points ) )
|
||||||
end_point = CUR.pts.n_points;
|
end_point = CUR.pts.n_points - 1;
|
||||||
|
|
||||||
while ( point <= end_point && ( CUR.pts.tags[point] & mask ) == 0 )
|
while ( point <= end_point && ( CUR.pts.tags[point] & mask ) == 0 )
|
||||||
point++;
|
point++;
|
||||||
|
|
Loading…
Reference in New Issue