shithub: freetype+ttf2subf

Download patch

ref: 2fe272aca62ff925f1f29d81268f2c4629f250da
parent: d062c54ce7f2c2bb98906f866755d214c4a73735
author: Werner Lemberg <[email protected]>
date: Mon Dec 18 14:40:07 EST 2017

* src/truetype/ttgxvar.c (tt_face_vary_cvt): Add size guard (#52688).

git/fs: mount .git/fs: mount/attach disallowed
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,9 @@
 2017-12-18  Werner Lemberg  <[email protected]>
 
+	* src/truetype/ttgxvar.c (tt_face_vary_cvt): Add size guard (#52688).
+
+2017-12-18  Werner Lemberg  <[email protected]>
+
 	[truetype] Fix previous commit.
 
 	* src/truetype/ttgload.c (TT_Process_Simple_Glyph): Correctly handle
--- a/src/truetype/ttgxvar.c
+++ b/src/truetype/ttgxvar.c
@@ -3110,7 +3110,10 @@
                                         table_len,
                                         point_count == 0 ? face->cvt_size
                                                          : point_count );
-      if ( !points || !deltas )
+
+      if ( !points                                                        ||
+           !deltas                                                        ||
+           ( localpoints == ALL_POINTS && point_count != face->cvt_size ) )
         ; /* failure, ignore it */
 
       else if ( localpoints == ALL_POINTS )