ref: a8c243514c9e2349f8aaabcb14da2d0a5cddceea
parent: bc5bcecfd2424394130d46f9f2e9f0ef52299599
author: Werner Lemberg <[email protected]>
date: Wed Jul 18 06:38:37 EDT 2012
Fix Savannah bug #36829. * src/type1/t1load.c (parse_encoding): Check cursor position after call to T1_Skip_PS_Token.
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,10 @@
+2012-07-13 Werner Lemberg <[email protected]>
+
+ Fix Savannah bug #36829.
+
+ * src/type1/t1load.c (parse_encoding): Check cursor position after
+ call to T1_Skip_PS_Token.
+
2012-07-11 Alexei Podtelezhnikov <[email protected]>
[ftstroke] Fix uninitialized return value.
--- a/src/type1/t1load.c
+++ b/src/type1/t1load.c
@@ -1293,6 +1293,8 @@
parser->root.cursor = cur;
T1_Skip_PS_Token( parser );
+ if ( parser->root.cursor >= limit )
+ return;
if ( parser->root.error )
return;