rgraves
/
freetype2
forked from minhngoc25a/freetype2
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

* src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter (#50573). 

The problematic font that exceeds the old limit is Lato-Regular,
version 2.007, containing bytecode generated by a buggy version of
ttfautohint.
This commit is contained in:
Werner Lemberg 2017-03-18 10:06:15 +01:00
parent 13fa85a246
commit 3e79254ae7
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ChangeLog
View File

@ -1,3 +1,11 @@
2017-03-18 Werner Lemberg <wl@gnu.org>
* src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter (#50573).
The problematic font that exceeds the old limit is Lato-Regular,
version 2.007, containing bytecode generated by a buggy version of
ttfautohint.
2017-03-18 Werner Lemberg <wl@gnu.org>
[truetype] Another limitation for bytecode loop count maximum.

2
src/truetype/ttinterp.c
View File

@ -7626,7 +7626,7 @@
exc->cvtSize / 10 );
else
exc->loopcall_counter_max = FT_MAX( 100,
5 * exc->cvtSize );
10 * exc->cvtSize );
/* as a protection against an unreasonable number of CVT entries */
/* we assume at most 100 control values per glyph for the counter */