rgraves
/
freetype2
forked from minhngoc25a/freetype2
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

* src/sfnt/ttcmap.c (tt_face_build_cmaps): Handle invalid offset 

correctly.
This commit is contained in:
Werner Lemberg 2006-03-21 20:47:28 +00:00
parent 26377008e7
commit 95f206b1ea
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@ -9,6 +9,9 @@
Check range of `glyph_index'.
* src/cff/cffgload.h: Updated.
* src/sfnt/ttcmap.c (tt_face_build_cmaps): Handle invalid offset
correctly.
2006-03-21 David Turner <david@freetype.org>
* src/autofit/aflatin.c (af_latin_metrics_scale): Fix small bug

2
src/sfnt/ttcmap.c
View File

@ -2271,7 +2271,7 @@
charmap.encoding = FT_ENCODING_NONE; /* will be filled later */
offset = TT_NEXT_ULONG( p );
if ( offset && table + offset + 2 <= limit )
if ( offset && offset <= face->cmap_size - 2 )
{
FT_Byte* cmap = table + offset;
volatile FT_UInt format = TT_PEEK_USHORT( cmap );