[truetype] Fix VF check from 2018-09-12 (#54973).

* src/truetype/ttgxvar.c (TT_Vary_Apply_Glyph_Deltas): Use correct
offsets for estimates.
This commit is contained in:
Ben Wagner 2018-11-07 00:47:44 +01:00 committed by Werner Lemberg
parent fbd2452346
commit fb0d66d04c
2 changed files with 9 additions and 2 deletions

View File

@ -1,3 +1,10 @@
2018-11-07 Ben Wagner <bungeman@google.com>
[truetype] Fix VF check from 2018-09-12 (#54973).
* src/truetype/ttgxvar.c (TT_Vary_Apply_Glyph_Deltas): Use correct
offsets for estimates.
2018-11-06 Werner Lemberg <wl@gnu.org>
[pshinter] Fix numeric overflow.

View File

@ -3725,8 +3725,8 @@
offsetToData = FT_GET_USHORT();
/* rough sanity test */
if ( offsetToData + ( tupleCount & GX_TC_TUPLE_COUNT_MASK ) * 4 >
dataSize )
if ( offsetToData > dataSize ||
( tupleCount & GX_TC_TUPLE_COUNT_MASK ) * 4 > dataSize )
{
FT_TRACE2(( "TT_Vary_Apply_Glyph_Deltas:"
" invalid glyph variation array header\n" ));