shithub: freetype+ttf2subf

Download patch

ref: dec8e7b97dd10e72890f785c98c9cd8fae8185b6
parent: 9ae5eaf862ee6c3464a98ef5f6e2fbfc929ef37a
author: Suzuki, Toshiya (鈴木俊哉) <[email protected]>
date: Fri Sep 19 12:47:01 EDT 2008

* src/base/ftobjs.c: Fix double free bug in sfnt-wrapped Type1/CID font support

git/fs: mount .git/fs: mount/attach disallowed
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,10 +1,20 @@
 2008-09-19  suzuki toshiya  <[email protected]>
 
+	* src/base/ftobjs.c (Mac_Read_sfnt_Resource): Fix double free bug
+	in sfnt-wrapped Type1 and sfnt-wrapped CID-keyed font support code.
+	open_face_from_buffer() frees the passed buffer when it cannot
+	open a face from the buffer, so the caller must not free it.
+
+2008-09-19  suzuki toshiya  <[email protected]>
+
 	* src/base/ftobjs.c (Mac_Read_sfnt_Resource): Add initial support
 	for sfnt-wrapped Type1 and sfnt-wrapped CID-keyed font.
 	(ft_lookup_PS_in_sfnt): New function to look up `TYP1' or `CID '
 	table in sfnt table directory. It is used before loading TrueType
 	font driver.
+
+	* docs/CHANGES: Add note about the current status of sfnt-wrapped
+	Type1 and sfnt-wrapped CID-keyed font support.
 
 2008-09-18  Werner Lemberg  <[email protected]>
 
--- a/src/base/ftobjs.c
+++ b/src/base/ftobjs.c
@@ -1539,8 +1539,6 @@
         FT_FREE( sfnt_data );
         goto Exit;
       }
-
-      FT_FREE( sfnt_ps );
     }
   Try_OpenType:
     error = open_face_from_buffer( library,