[sfnt] Fix Savannah bug #43672.

* src/sfnt/ttkern.c (tt_face_load_kern): Use correct value for minimum table length test.
10 years ago · f70d9342e6
parent 73be9f9ab6
commit f70d9342e6
2 changed files with 8 additions and 1 deletions
--- a/7
+++ b/7
@ -1,3 +1,10 @@
+2014-11-24  Werner Lemberg  <wl@gnu.org>
+
+	[sfnt] Fix Savannah bug #43672.
+
+	* src/sfnt/ttkern.c (tt_face_load_kern): Use correct value for
+	minimum table length test.
+
 2014-11-24  Werner Lemberg  <wl@gnu.org>

 	[type1, type42] Another fix for Savannah bug #43655.
--- a/src/sfnt/ttkern.c
+++ b/src/sfnt/ttkern.c
@ -99,7 +99,7 @@
      length   = FT_NEXT_USHORT( p );
      coverage = FT_NEXT_USHORT( p );

-      if ( length <= 6 )
+      if ( length <= 6 + 8 )
        break;

      p_next += length;