minhngoc25a
/
freetype2
mirror of git://git.savannah.gnu.org/freetype/freetype2.git
2
1
Fork 2
Code Issues 9 Releases Wiki Activity

[sfnt] Protect against zero-size bitmaps (#46345). 

* src/sfnt/ttsbit.c (tt_sbit_decoder_load_bitmap): Check
`glyph_size'.
This commit is contained in:
Werner Lemberg 2015-11-03 17:30:36 +01:00
parent b6fd5bc06c
commit aae8808780
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ChangeLog
View File

@ -1,3 +1,10 @@
2015-11-03 Werner Lemberg <wl@gnu.org>
[sfnt] Protect against zero-size bitmaps (#46345).
* src/sfnt/ttsbit.c (tt_sbit_decoder_load_bitmap): Check
`glyph_size'.
2015-11-02 Nikolaus Waxweiler <madigens@gmail.com>
* src/autofit/afloader.c (af_loader_load_g): Implement emboldening.

3
src/sfnt/ttsbit.c
View File

@ -1025,7 +1025,8 @@
/* seek into the EBDT table now */
if ( glyph_start + glyph_size > decoder->ebdt_size )
if ( !glyph_size ||
glyph_start + glyph_size > decoder->ebdt_size )
{
error = FT_THROW( Invalid_Argument );
goto Exit;