minhngoc25a
/
freetype2
mirror of git://git.savannah.gnu.org/freetype/freetype2.git
2
1
Fork 2
Code Issues 9 Releases Wiki Activity

[cid] Better handle invalid glyph stream offsets (#46221). 

* src/cid/cidgload.c (cid_load_glyph): Check minimum size of glyph
length.
This commit is contained in:
Bungeman 2015-10-19 23:27:06 +02:00 committed by Werner Lemberg
parent 2961b66c70
commit ba8a528b19
2 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ChangeLog
View File

@ -1,3 +1,10 @@
2015-10-18 Bungeman <bungeman@gmail.com>
[cid] Better handle invalid glyph stream offsets (#46221).
* src/cid/cidgload.c (cid_load_glyph): Check minimum size of glyph
length.
2015-10-18 Werner Lemberg <wl@gnu.org>
[psaux] Fix tracing of negative numbers.

6
src/cid/cidgload.c
View File

@ -157,6 +157,12 @@
/* Adjustment for seed bytes. */
cs_offset = decoder->lenIV >= 0 ? (FT_UInt)decoder->lenIV : 0;
if ( cs_offset > glyph_length )
{
FT_TRACE0(( "cid_load_glyph: invalid glyph stream offsets\n" ));
error = FT_THROW( Invalid_Offset );
goto Exit;
}
/* Decrypt only if lenIV >= 0. */
if ( decoder->lenIV >= 0 )