shithub: freetype+ttf2subf

Download patch

ref: c220d8b498a66e241872ea4b39a8902177e5fac3
parent: d353f6e0123a0acffe5068b2e5d0cd2b5c93d196
author: Werner Lemberg <[email protected]>
date: Sat Oct 10 04:13:04 EDT 2015 

[truetype] Better protection against malformed GX data (#46166).

* src/truetype/ttgxvar.c (TT_Vary_Apply_Glyph_Deltas): Correctly
handle empty `localpoints' array.

git/fs: mount .git/fs: mount/attach disallowed 
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,12 @@
 2015-10-10  Werner Lemberg  <[email protected]>
 
+	[truetype] Better protection against malformed GX data (#46166).
+
+	* src/truetype/ttgxvar.c (TT_Vary_Apply_Glyph_Deltas): Correctly
+	handle empty `localpoints' array.
+
+2015-10-10  Werner Lemberg  <[email protected]>
+
 	* src/pcf/pcfread.c (pcf_read_TOC): Check stream size (#46162).
 
 2015-10-09  Werner Lemberg  <[email protected]>
--- a/src/truetype/ttgxvar.c
+++ b/src/truetype/ttgxvar.c
@@ -1950,6 +1950,9 @@
 #endif
       }
 
+      else if ( localpoints == NULL )
+        ; /* failure, ignore it */
+
       else
       {
 #ifdef FT_DEBUG_LEVEL_TRACE