Fix OOB in replace_glyph()

Patch from Kenichi Ishibashi.
13 years ago · c521e793bd
parent 03408ce73d
commit c521e793bd
1 changed files with 2 additions and 0 deletions
--- a/src/hb-buffer.cc
+++ b/src/hb-buffer.cc
@ -317,6 +317,8 @@ hb_buffer_t::copy_glyph (void)
 void
 hb_buffer_t::replace_glyph (hb_codepoint_t glyph_index)
 {
+  if (!make_room_for (1, 1)) return;
+
  out_info[out_len] = info[idx];
  out_info[out_len].codepoint = glyph_index;