shithub: freetype+ttf2subf

Download patch

ref: 888cd1843e935fe675cf2ac303116d4ed5b9d54b
parent: c73e160517fafd8e1dae498e40035e06e7eb3c04
author: Werner Lemberg <[email protected]>
date: Thu Jul 8 03:29:42 EDT 2010 

Fix Savannah bug #30361.

* src/truetype/ttinterp.c (Ins_IUP): Fix bounds check.

git/fs: mount .git/fs: mount/attach disallowed 
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2010-07-08  Werner Lemberg  <[email protected]>
+
+	Fix Savannah bug #30361.
+
+	* src/truetype/ttinterp.c (Ins_IUP): Fix bounds check.
+
 2010-07-06  Werner Lemberg  <[email protected]>
 
 	Pacify compiler.
--- a/src/truetype/ttinterp.c
+++ b/src/truetype/ttinterp.c
@@ -6755,8 +6755,8 @@
       end_point   = CUR.pts.contours[contour] - CUR.pts.first_point;
       first_point = point;
 
-      if ( CUR.pts.n_points <= end_point )
-        end_point = CUR.pts.n_points;
+      if ( BOUNDS ( end_point, CUR.pts.n_points ) )
+        end_point = CUR.pts.n_points - 1;
 
       while ( point <= end_point && ( CUR.pts.tags[point] & mask ) == 0 )
         point++;