Fix a crash with invalid matrix element

Fixes fontconfig/fontconfig#140

Fix a crash with invalid matrix element
Fixes fontconfig/fontconfig#140
699d6e4d · Akira TAGOH · b047e299 · 699d6e4d
Commit 699d6e4d authored Jan 23, 2019 by Akira TAGOH
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

src/fcxml.c src/fcxml.c +5 -0

No files found.
--- a/src/fcxml.c
+++ b/src/fcxml.c
@@ -1480,6 +1480,11 @@ FcParseMatrix (FcConfigParse *parse)
    m.xy = FcPopExpr (parse);
    m.xx = FcPopExpr (parse);

+    if (!m.yy || !m.yx || !m.xy || !m.xx)
+    {
+	FcConfigMessage (parse, FcSevereWarning, "Missing values in matrix element");
+	return;
+    }
    if (FcPopExpr (parse))
      FcConfigMessage (parse, FcSevereError, "wrong number of matrix elements");
    else