[truetype] Better protection against malformed GX data (#46166).

* src/truetype/ttgxvar.c (TT_Vary_Apply_Glyph_Deltas): Correctly handle empty `localpoints' array.
9 years ago · c220d8b498
parent d353f6e012
commit c220d8b498
2 changed files with 10 additions and 0 deletions
--- a/7
+++ b/7
@ -1,3 +1,10 @@
+2015-10-10  Werner Lemberg  <wl@gnu.org>
+
+	[truetype] Better protection against malformed GX data (#46166).
+
+	* src/truetype/ttgxvar.c (TT_Vary_Apply_Glyph_Deltas): Correctly
+	handle empty `localpoints' array.
+
 2015-10-10  Werner Lemberg  <wl@gnu.org>

 	* src/pcf/pcfread.c (pcf_read_TOC): Check stream size (#46162).
--- a/src/truetype/ttgxvar.c
+++ b/src/truetype/ttgxvar.c
@ -1950,6 +1950,9 @@
 #endif
      }

+      else if ( localpoints == NULL )
+        ; /* failure, ignore it */
+
      else
      {
 #ifdef FT_DEBUG_LEVEL_TRACE