mirrors
/
freetype
mirror of https://github.com/freetype/freetype
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[type1/MM] Safer handle arrays of different types. 

* src/type1/t1load.c (parse_blend_design_map): Separately allocate...
(T1_Done_Blend): ... and free `design_points` and `blend_points`.
This commit is contained in:
Alexei Podtelezhnikov 2024-05-12 22:38:38 -04:00
parent 5b1cde804d
commit b8db819768
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/type1/t1load.c
View File

@ -751,6 +751,7 @@
PS_DesignMap dmap = blend->design_map + n;
FT_FREE( dmap->blend_points );
FT_FREE( dmap->design_points );
dmap->num_points = 0;
}
@ -1043,9 +1044,9 @@
}
/* allocate design map data */
if ( FT_QNEW_ARRAY( map->design_points, num_points * 2 ) )
if ( FT_QNEW_ARRAY( map->design_points, num_points ) ||
FT_QNEW_ARRAY( map->blend_points, num_points ) )
goto Exit;
map->blend_points = (FT_Fixed*)(map->design_points + num_points);
map->num_points = (FT_Byte)num_points;
for ( p = 0; p < num_points; p++ )