Commit 891468f1 authored by Heiko Lewin's avatar Heiko Lewin
Browse files

Merge branch 'font-parse-oob' into 'master'

Add a bounds check to cairo_cff_font_read_fdselect()

Closes #451

See merge request !103
parents 21db0989 b1e81ee9
......@@ -991,6 +991,8 @@ cairo_cff_font_read_fdselect (cairo_cff_font_t *font, unsigned char *p)
p += 2;
fd = *p++;
last = get_unaligned_be16 (p);
if (last > font->num_glyphs)
return CAIRO_INT_STATUS_UNSUPPORTED;
for (j = first; j < last; j++)
font->fdselect[j] = fd;
}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment