commit ba03af6f91321ab7688f7368730d9fa650fd6c27
author Werner Lemberg <wl@gnu.org> Wed May 30 13:57:02 2007 +0000
committer Werner Lemberg <wl@gnu.org> Wed May 30 13:57:02 2007 +0000
tree 0403bea4ddf13cd37b6abbe1f61da271d512d1d1
parent 99e0c18ea19ec74c23958064b326a4d7a2129aaf

* src/type1/t1load.c (parse_subrs, parse_charstrings): Protect
against too small binary data strings.

* src/bdf/bdflib.c (_bdf_parse_glyphs): Check `STARTCHAR' better.

src/bdf/bdflib.c

diff --git a/src/bdf/bdflib.c b/src/bdf/bdflib.c
index 93061bb..8dade71 100644
--- a/src/bdf/bdflib.c
+++ b/src/bdf/bdflib.c
@@ -1537,6 +1537,12 @@
 
       s = _bdf_list_join( &p->list, ' ', &slen );
 
+      if ( !s )
+      {
+        error = BDF_Err_Invalid_File_Format;
+        goto Exit;
+      }
+
       if ( FT_NEW_ARRAY( p->glyph_name, slen + 1 ) )
         goto Exit;