| commit | 73aa20ca1d86f6c838bd534cda741adc4cfa7aee | [log] [tgz] |
|---|---|---|
| author | suzuki toshiya <mpsuzuki@hiroshima-u.ac.jp> | Mon Sep 20 01:30:38 2010 +0900 |
| committer | suzuki toshiya <mpsuzuki@hiroshima-u.ac.jp> | Mon Sep 20 01:31:42 2010 +0900 |
| tree | 2b4d888c27affde07096fa03d4a03cc9d881c6c0 | |
| parent | d2d843a01ce7815c11458eb0c1a319a525139af1 [diff] |
[cff] Truncate the element length at the end of the stream. See Savannah bug #30975. * src/cff/cffload.c (cff_index_access_element): `off2', the offset to the next element is truncated at the end of the stream to prevent invalid I/O. As `off1', the offset to the requested element has been checked by FT_STREAM_SEEK(), `off2' should be checked similarly.