mirrors
/
freetype
mirror of https://github.com/freetype/freetype
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

* src/sfnt/ttkern.c (tt_face_load_kern): Reject format 2 tables. 

Reported by Behdad.
This commit is contained in:
Werner Lemberg 2017-09-11 08:51:44 +02:00
parent d1b6c6e211
commit 3e4b79970e
2 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog
View File

@ -1,3 +1,9 @@
2017-09-11 Werner Lemberg <wl@gnu.org>
* src/sfnt/ttkern.c (tt_face_load_kern): Reject format 2 tables.
Reported by Behdad.
2017-09-09 Werner Lemberg <wl@gnu.org>
[autofit] Improve communication with ftgrid.

8
src/sfnt/ttkern.c
View File

@ -85,7 +85,7 @@
for ( nn = 0; nn < num_tables; nn++ )
{
FT_UInt num_pairs, length, coverage;
FT_UInt num_pairs, length, coverage, format;
FT_Byte* p_next;
FT_UInt32 mask = (FT_UInt32)1UL << nn;
@ -107,6 +107,12 @@
if ( p_next > p_limit ) /* handle broken table */
p_next = p_limit;
format = coverage >> 8;
/* we currently only support format 0 kerning tables */
if ( format != 0 )
goto NextTable;
/* only use horizontal kerning tables */
if ( ( coverage & 3U ) != 0x0001 ||
p + 8 > p_next )