commit | ba03af6f91321ab7688f7368730d9fa650fd6c27 | [log] [tgz] |
---|---|---|
author | Werner Lemberg <wl@gnu.org> | Wed May 30 13:57:02 2007 +0000 |
committer | Werner Lemberg <wl@gnu.org> | Wed May 30 13:57:02 2007 +0000 |
tree | 0403bea4ddf13cd37b6abbe1f61da271d512d1d1 | |
parent | 99e0c18ea19ec74c23958064b326a4d7a2129aaf [diff] [blame] |
* src/type1/t1load.c (parse_subrs, parse_charstrings): Protect against too small binary data strings. * src/bdf/bdflib.c (_bdf_parse_glyphs): Check `STARTCHAR' better.
diff --git a/src/bdf/bdflib.c b/src/bdf/bdflib.c index 93061bb..8dade71 100644 --- a/src/bdf/bdflib.c +++ b/src/bdf/bdflib.c
@@ -1537,6 +1537,12 @@ s = _bdf_list_join( &p->list, ' ', &slen ); + if ( !s ) + { + error = BDF_Err_Invalid_File_Format; + goto Exit; + } + if ( FT_NEW_ARRAY( p->glyph_name, slen + 1 ) ) goto Exit;