ref: 011d111218afae2f0abb06cf27b83e4740a51f85
parent: b800329782655af78259f0d4d00d48b17bb7c5f6
author: Werner Lemberg <[email protected]>
date: Sun Jan 21 04:36:00 EST 2007
* src/sfnt/ttmtx.c (tt_face_get_metrics) [!FT_CONFIG_OPTION_OLD_INTERNALS]: Fix limit check.
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2007-01-21 Werner Lemberg <[email protected]>
+
+ * src/sfnt/ttmtx.c (tt_face_get_metrics)
+ [!FT_CONFIG_OPTION_OLD_INTERNALS]: Fix limit check.
+
2007-01-17 Werner Lemberg <[email protected]>
--- a/src/sfnt/ttmtx.c
+++ b/src/sfnt/ttmtx.c
@@ -368,11 +368,11 @@
if ( gindex < (FT_UInt)k )
{
table_pos += 4 * gindex;
- if ( table_pos + 6 > table_end )
+ if ( table_pos + 4 > table_end )
goto NoData;
if ( FT_STREAM_SEEK( table_pos ) ||
- FT_READ_USHORT( *aadvance) ||
+ FT_READ_USHORT( *aadvance ) ||
FT_READ_SHORT( *abearing ) )
goto NoData;
}