Fix Savannah bug #30361.

* src/truetype/ttinterp.c (Ins_IUP): Fix bounds check.
15 years ago · 888cd1843e
parent c73e160517
commit 888cd1843e
2 changed files with 8 additions and 2 deletions
--- a/6
+++ b/6
@ -1,3 +1,9 @@
+2010-07-08  Werner Lemberg  <wl@gnu.org>
+
+	Fix Savannah bug #30361.
+
+	* src/truetype/ttinterp.c (Ins_IUP): Fix bounds check.
+
 2010-07-06  Werner Lemberg  <wl@gnu.org>

 	Pacify compiler.
--- a/src/truetype/ttinterp.c
+++ b/src/truetype/ttinterp.c
@ -6755,8 +6755,8 @@
      end_point   = CUR.pts.contours[contour] - CUR.pts.first_point;
      first_point = point;

-      if ( CUR.pts.n_points <= end_point )
-        end_point = CUR.pts.n_points;
+      if ( BOUNDS ( end_point, CUR.pts.n_points ) )
+        end_point = CUR.pts.n_points - 1;

      while ( point <= end_point && ( CUR.pts.tags[point] & mask ) == 0 )
        point++;