| commit | e5920896a363b4d24d9f444297eabccb8c824ccc | |
| author | Werner Lemberg <wl@gnu.org> | |
| Fri, 23 Jun 2017 07:33:46 +0000 (23 09:33 +0200) | ||
| committer | Werner Lemberg <wl@gnu.org> | |
| Fri, 23 Jun 2017 07:33:46 +0000 (23 09:33 +0200) | ||
| tree | 50a7946e663424c19789df45834ca295a6a7ac53 | treesnapshot (tar.gz zip) |
| parent | d9260b567bd5a4c07273289e4f8ba2e02200183d | commitdiff |
Fix bytecode handling of composites with composite subglyphs.
For `TA_font_build_subglyph_shifter', subglyph records must not be further
expanded.
Problem reported by Pablo Moleri <PMoleri@infragistics.com>. Note that this
bug was there from the very beginning, AFAICS. FreeType simply ignores such
invalid bytecode (which tried to access a contour with an out-of-bounds
index), but other applications are not that robust.
For `TA_font_build_subglyph_shifter', subglyph records must not be further
expanded.
Problem reported by Pablo Moleri <PMoleri@infragistics.com>. Note that this
bug was there from the very beginning, AFAICS. FreeType simply ignores such
invalid bytecode (which tried to access a contour with an out-of-bounds
index), but other applications are not that robust.
| THANKS | diffblobblamehistory | |
| lib/tabytecode.c | diffblobblamehistory | |
| lib/taloader.c | diffblobblamehistory |