* src/pcf/pcfread.c (pcf_read_TOC): Check stream size (#46162).

9 years ago · d353f6e012
parent c12956e700
commit d353f6e012
2 changed files with 7 additions and 0 deletions
--- a/4
+++ b/4
@ -1,3 +1,7 @@
+2015-10-10  Werner Lemberg  <wl@gnu.org>
+
+	* src/pcf/pcfread.c (pcf_read_TOC): Check stream size (#46162).
+
 2015-10-09  Werner Lemberg  <wl@gnu.org>

 	* src/gzip/ftgzip.c (FT_Stream_OpenGzip): Use real stream size.
--- a/src/pcf/pcfread.c
+++ b/src/pcf/pcfread.c
@ -106,6 +106,9 @@ THE SOFTWARE.
         toc->count   == 0                )
      return FT_THROW( Invalid_File_Format );

+    if ( stream->size < 16 )
+      return FT_THROW( Invalid_File_Format );
+
    /* we need 16 bytes per TOC entry */
    if ( toc->count > stream->size >> 4 )
    {