[type1, type42] Another fix for Savannah bug #43655.
* src/type1/t1load.c (parse_charstrings), src/type42/t42parse.c (t42_parse_charstrings): Add another boundary testing.
This commit is contained in:
parent
a7a4207d10
commit
73be9f9ab6
@ -1,3 +1,10 @@
|
||||
2014-11-24 Werner Lemberg <wl@gnu.org>
|
||||
|
||||
[type1, type42] Another fix for Savannah bug #43655.
|
||||
|
||||
* src/type1/t1load.c (parse_charstrings), src/type42/t42parse.c
|
||||
(t42_parse_charstrings): Add another boundary testing.
|
||||
|
||||
2014-11-24 Werner Lemberg <wl@gnu.org>
|
||||
|
||||
[docmaker] Formatting, copyright, improved documentation.
|
||||
|
@ -1596,6 +1596,11 @@
|
||||
}
|
||||
|
||||
T1_Skip_PS_Token( parser );
|
||||
if ( parser->root.cursor >= limit )
|
||||
{
|
||||
error = FT_THROW( Invalid_File_Format );
|
||||
goto Fail;
|
||||
}
|
||||
if ( parser->root.error )
|
||||
return;
|
||||
|
||||
|
@ -849,6 +849,12 @@
|
||||
break;
|
||||
|
||||
T1_Skip_PS_Token( parser );
|
||||
if ( parser->root.cursor >= limit )
|
||||
{
|
||||
FT_ERROR(( "t42_parse_charstrings: out of bounds\n" ));
|
||||
error = FT_THROW( Invalid_File_Format );
|
||||
goto Fail;
|
||||
}
|
||||
if ( parser->root.error )
|
||||
return;
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user