rgraves
/
freetype2
forked from minhngoc25a/freetype2
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

otvalid: Prevent an overflow by GPOS/GSUB 32b-bit offset.

This commit is contained in:
suzuki toshiya 2009-08-01 00:30:13 +09:00
parent 95aeebf438
commit 90c7efc8f2
3 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
ChangeLog
View File

@ -1,3 +1,14 @@
2009-07-31 suzuki toshiya <mpsuzuki@hiroshima-u.ac.jp>
otvalid: Prevent an overflow by GPOS/GSUB 32b-bit offset.
* src/otvalid/otvgpos.c (otv_ExtensionPos_validate):
Extend ExtensionOffset from FT_UInt to FT_ULong, to
cover 32-bit offset on 16-bit platform.
* src/otvalid/otvgsub.c (otv_ExtensionSubst_validate):
Ditto.
2009-07-31 suzuki toshiya <mpsuzuki@hiroshima-u.ac.jp>
ftobjs.c: Prevent an overflow in glyph index handling.

3
src/otvalid/otvgpos.c
View File

@ -911,7 +911,8 @@
{
case 1: /* ExtensionPosFormat1 */
{
FT_UInt ExtensionLookupType, ExtensionOffset;
FT_UInt ExtensionLookupType;
FT_ULong ExtensionOffset;
OTV_Validate_Func validate;

3
src/otvalid/otvgsub.c
View File

@ -415,7 +415,8 @@
{
case 1: /* ExtensionSubstFormat1 */
{
FT_UInt ExtensionLookupType, ExtensionOffset;
FT_UInt ExtensionLookupType;
FT_ULong ExtensionOffset;
OTV_Validate_Func validate;