rgraves
/
freetype2
forked from minhngoc25a/freetype2
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

[type1, type42] Fix Savannah bug #43655. 

* src/type1/t1load.c (parse_charstrings), src/type42/t42parse.c
(t42_parse_charstrings): Fix boundary testing.
This commit is contained in:
Werner Lemberg 2014-11-21 22:19:28 +01:00
parent b1fc00d5dc
commit dd89710f0f
3 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ChangeLog
View File

@ -1,3 +1,10 @@
2014-11-21 Werner Lemberg <wl@gnu.org>
[type1, type42] Fix Savannah bug #43655.
* src/type1/t1load.c (parse_charstrings), src/type42/t42parse.c
(t42_parse_charstrings): Fix boundary testing.
2014-11-21 Werner Lemberg <wl@gnu.org>
* src/pcf/pcfread.c (pcf_get_metrics): Sanitize invalid metrics.

2
src/type1/t1load.c
View File

@ -1604,7 +1604,7 @@
FT_PtrDist len;
if ( cur + 1 >= limit )
if ( cur + 2 >= limit )
{
error = FT_THROW( Invalid_File_Format );
goto Fail;

2
src/type42/t42parse.c
View File

@ -858,7 +858,7 @@
FT_PtrDist len;
if ( cur + 1 >= limit )
if ( cur + 2 >= limit )
{
FT_ERROR(( "t42_parse_charstrings: out of bounds\n" ));
error = FT_THROW( Invalid_File_Format );