type1: Check invalid string longer than PostScript limit.
This commit is contained in:
parent
a8c515d25c
commit
f7ecdbc70a
|
@ -1,3 +1,10 @@
|
||||||
|
2009-07-31 suzuki toshiya <mpsuzuki@hiroshima-u.ac.jp>
|
||||||
|
|
||||||
|
type1: Check invalid string longer than PostScript limit.
|
||||||
|
|
||||||
|
* src/type1/t1afm.c (t1_get_index): Check invalid string
|
||||||
|
which exceeds the limit of PostScript string/name objects.
|
||||||
|
|
||||||
2009-07-31 suzuki toshiya <mpsuzuki@hiroshima-u.ac.jp>
|
2009-07-31 suzuki toshiya <mpsuzuki@hiroshima-u.ac.jp>
|
||||||
|
|
||||||
gzip: Use FT2 zcalloc() & zfree() in ftgzip.c by default.
|
gzip: Use FT2 zcalloc() & zfree() in ftgzip.c by default.
|
||||||
|
|
|
@ -57,6 +57,10 @@
|
||||||
FT_Int n;
|
FT_Int n;
|
||||||
|
|
||||||
|
|
||||||
|
/* PS string/name length must be < 16-bit */
|
||||||
|
if ( ( len - 0xFFFFU ) > 0 )
|
||||||
|
return 0;
|
||||||
|
|
||||||
for ( n = 0; n < type1->num_glyphs; n++ )
|
for ( n = 0; n < type1->num_glyphs; n++ )
|
||||||
{
|
{
|
||||||
char* gname = (char*)type1->glyph_names[n];
|
char* gname = (char*)type1->glyph_names[n];
|
||||||
|
|
Loading…
Reference in New Issue