| commit | 643d49df0919b56c6603ab9310839899b77aad8a | [log] [tgz] |
|---|---|---|
| author | suzuki toshiya <mpsuzuki@hiroshima-u.ac.jp> | Mon Sep 20 01:07:57 2010 +0900 |
| committer | suzuki toshiya <mpsuzuki@hiroshima-u.ac.jp> | Mon Sep 20 01:16:39 2010 +0900 |
| tree | 5b4fadf18cc480fbf9f3f2c329a4da60ecdb5b6f | |
| parent | 900e7e0cdeed5d622cd3d67233b85712e8cb3763 [diff] |
[truetype] Sanitize the broken offsets in `loca'. * src/truetype/ttpload.c (tt_face_get_location): If `pos1', the offset to the requested entry in `glyf' exceeds the end of the table, return offset=0, length=0. If `pos2', the offset to the next entry in `glyf' exceeds the end of the table, truncate the entry length at the end of `glyf' table. See Savannah bug #31040.