diff options
| author | Werner Lemberg <wl@gnu.org> | 2010-07-17 13:39:50 +0200 |
|---|---|---|
| committer | Werner Lemberg <wl@gnu.org> | 2010-07-17 13:39:50 +0200 |
| commit | 2de6b8a3db5f8544a42276364b3dcc1ec7024d67 (patch) | |
| tree | 7f9368defdf47f1cf1a21dd953f42ea00f7638df /src/cff | |
| parent | 072afbdbac648bb65321b322a4f627da51b7634d (diff) | |
[cff] Final try to fix `hintmask' and `cntrmask' limit check.
Problem reported by Tobias Wolf <towolf@gmail.com>.
* src/cff/cffgload.c (cff_decoder_parse_charstrings)
<cff_op_hintmask>: Sigh. I'm apparently too silly to fix this
correctly in less than three tries.
Diffstat (limited to 'src/cff')
| -rw-r--r-- | src/cff/cffgload.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/cff/cffgload.c b/src/cff/cffgload.c index 4a5f8f00..347041cf 100644 --- a/src/cff/cffgload.c +++ b/src/cff/cffgload.c @@ -1344,7 +1344,7 @@ /* instruction). Additionally, there must be space for */ /* `num_hints' bits. */ - if ( ( ip + 1 + ( ( decoder->num_hints + 7 ) >> 3 ) ) >= limit ) + if ( ( ip + ( ( decoder->num_hints + 7 ) >> 3 ) ) >= limit ) goto Syntax_Error; if ( hinter ) |