Commit ed7e51eb authored by Heiko Lewin's avatar Heiko Lewin
Browse files

Merge branch 'font-oob' into 'master'

Add a bounds check to cairo_cff_parse_charstring()

Closes #444

See merge request cairo/cairo!90
parents b0ef04e2 467e7822
......@@ -1604,6 +1604,8 @@ cairo_cff_parse_charstring (cairo_cff_font_t *font,
}
} else {
sub_num = font->type2_stack_top_value + font->local_sub_bias;
if (sub_num >= _cairo_array_num_elements(&font->local_sub_index))
return CAIRO_INT_STATUS_UNSUPPORTED;
element = _cairo_array_index (&font->local_sub_index, sub_num);
if (! font->local_subs_used[sub_num] ||
(need_width && !font->type2_found_width))
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment