[truetype] Sanitizer fix.

* src/truetype/ttgxvar.c (ft_var_readpackedpoints): Increase array
to fix nested loops.
This commit is contained in:
Werner Lemberg 2016-07-19 07:06:19 +02:00
parent a3b70d76ba
commit e69f34b1e2
2 changed files with 12 additions and 2 deletions

View File

@ -1,3 +1,10 @@
2016-07-19 Werner Lemberg <wl@gnu.org>
[truetype] Sanitizer fix.
* src/truetype/ttgxvar.c (ft_var_readpackedpoints): Increase array
to fix nested loops.
2016-07-18 Werner Lemberg <wl@gnu.org>
[truetype] Make GETDATA work only for GX fonts.

View File

@ -158,13 +158,16 @@
return NULL;
}
if ( FT_NEW_ARRAY( points, n ) )
/* in the nested loops below we increase `i' twice; */
/* it is faster to simply allocate one more slot */
/* than to add another test within the loop */
if ( FT_NEW_ARRAY( points, n + 1 ) )
return NULL;
*point_cnt = n;
first = 0;
i = 0;
i = 0;
while ( i < n )
{
runcnt = FT_GET_BYTE();