From 337fcb6ad6ca9df4347fb57217836417db6cbf15 Mon Sep 17 00:00:00 2001
From: Werner Lemberg <wl@gnu.org>
Date: Thu, 29 Nov 2012 21:10:10 +0100
Subject: [PATCH] [type1] Fix Savannah bug #37831.

The bug report also contains a patch.

* src/type1/t1parse.c (T1_Get_Private_Dict) <found>: Really fix
change from 2012-09-17.
---
 ChangeLog           | 9 +++++++++
 src/type1/t1parse.c | 3 ++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index a3868fa91..e9a722fea 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,12 @@
+2012-11-29  Werner Lemberg  <wl@gnu.org>
+
+	[type1] Fix Savannah bug #37831.
+
+	The bug report also contains a patch.
+
+	* src/type1/t1parse.c (T1_Get_Private_Dict) <found>: Really fix
+	change from 2012-09-17.
+
 2012-11-28  Alexei Podtelezhnikov  <apodtele@gmail.com>
 
 	[truetype] Fix formatting and typo.
diff --git a/src/type1/t1parse.c b/src/type1/t1parse.c
index 1ba48c13c..d1c24c2b0 100644
--- a/src/type1/t1parse.c
+++ b/src/type1/t1parse.c
@@ -364,7 +364,8 @@
       /* or string (as e.g. in u003043t.gsf from ghostscript)       */
 
       parser->root.cursor = parser->base_dict;
-      parser->root.limit  = cur + 9;
+      /* set limit to `eexec' + newline + 4 characters */
+      parser->root.limit  = cur + 10;
 
       cur   = parser->root.cursor;
       limit = parser->root.limit;