mirror of https://github.com/freetype/freetype
[type1/MM] Safer handle arrays of different types.
* src/type1/t1load.c (parse_blend_design_map): Separately allocate... (T1_Done_Blend): ... and free `design_points` and `blend_points`.
This commit is contained in:
parent
5b1cde804d
commit
b8db819768
|
@ -751,6 +751,7 @@
|
|||
PS_DesignMap dmap = blend->design_map + n;
|
||||
|
||||
|
||||
FT_FREE( dmap->blend_points );
|
||||
FT_FREE( dmap->design_points );
|
||||
dmap->num_points = 0;
|
||||
}
|
||||
|
@ -1043,9 +1044,9 @@
|
|||
}
|
||||
|
||||
/* allocate design map data */
|
||||
if ( FT_QNEW_ARRAY( map->design_points, num_points * 2 ) )
|
||||
if ( FT_QNEW_ARRAY( map->design_points, num_points ) ||
|
||||
FT_QNEW_ARRAY( map->blend_points, num_points ) )
|
||||
goto Exit;
|
||||
map->blend_points = (FT_Fixed*)(map->design_points + num_points);
|
||||
map->num_points = (FT_Byte)num_points;
|
||||
|
||||
for ( p = 0; p < num_points; p++ )
|
||||
|
|
Loading…
Reference in New Issue