shithub: freetype+ttf2subf

Download patch

ref: 3e79254ae73ba4e5f951967b42d38b0aa1460af8
parent: 13fa85a246d5fddc037ef3f11e61f9cf0ff3b2be
author: Werner Lemberg <[email protected]>
date: Sat Mar 18 06:06:15 EDT 2017 

* src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter (#50573).

The problematic font that exceeds the old limit is Lato-Regular,
version 2.007, containing bytecode generated by a buggy version of
ttfautohint.

git/fs: mount .git/fs: mount/attach disallowed 
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,13 @@
 2017-03-18  Werner Lemberg  <[email protected]>
 
+	* src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter (#50573).
+
+	The problematic font that exceeds the old limit is Lato-Regular,
+	version 2.007, containing bytecode generated by a buggy version of
+	ttfautohint.
+
+2017-03-18  Werner Lemberg  <[email protected]>
+
 	[truetype] Another limitation for bytecode loop count maximum.
 
 	Reported as
--- a/src/truetype/ttinterp.c
+++ b/src/truetype/ttinterp.c
@@ -7626,7 +7626,7 @@
                                           exc->cvtSize / 10 );
     else
       exc->loopcall_counter_max = FT_MAX( 100,
-                                          5 * exc->cvtSize );
+                                          10 * exc->cvtSize );
 
     /* as a protection against an unreasonable number of CVT entries  */
     /* we assume at most 100 control values per glyph for the counter */