diff options
| author | George Williams <pfaedit@users.sourceforge.net> | 2011-03-14 14:17:22 -0700 |
|---|---|---|
| committer | George Williams <pfaedit@users.sourceforge.net> | 2011-03-14 14:17:22 -0700 |
| commit | 38744f1f74ac88b1012585b9b1a6eb94818cc783 (patch) | |
| tree | 75ceaa8cf844aa74cc74c647d213ebd9eaf47098 | |
| parent | f17fa77717a1f19bb95eb9bc8c56be3c2c8ae95f (diff) | |
Patch by Paul Flo Williams.
The charview hint routines used a routine which could try to store 5 points in an array that only held 4. The resultant memory corruption could cause crashes.
| -rw-r--r-- | fontforge/charview.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fontforge/charview.c b/fontforge/charview.c index ce84acec..5e529185 100644 --- a/fontforge/charview.c +++ b/fontforge/charview.c @@ -8659,7 +8659,7 @@ static void CVMenuClearHints(GWindow gw,struct gmenuitem *mi,GEvent *e) { static int CVNumForePointsSelected(CharView *cv, BasePoint **bp) { SplineSet *spl; SplinePoint *test, *first; - BasePoint *bps[4]; + BasePoint *bps[5]; int i, cnt; if ( cv->b.drawmode!=dm_fore ) |