t1lib-5.1.2-CVE-2011-0764.patch

   1 CVE-2011-0764
   2
   3 Author: Marc Deslauriers <marc.deslauriers@canonical.com>
   4 Origin: https://bazaar.launchpad.net/~ubuntu-branches/ubuntu/wily/t1lib/wily/view/head:/debian/patches/CVE-2011-0764.diff
   5
   6 --- t1lib-5.1.2.orig/lib/type1/type1.c  2011-12-13 14:24:14.280965637 -0600
   7 +++ t1lib-5.1.2/lib/type1/type1.c       2011-12-13 14:25:25.893320747 -0600
   8 @@ -1700,6 +1700,7 @@
   9    long pindex = 0;
  10
  11    /* compute hinting for previous segment! */
  12 +  if (ppoints == NULL) Error0i("RLineTo: No previous point!\n");
  13    FindStems( currx, curry, currx-ppoints[numppoints-2].x, curry-ppoints[numppoints-2].y, dx, dy);
  14
  15    /* Allocate a new path point and pre-setup data */
  16 @@ -1728,6 +1729,7 @@
  17    long pindex = 0;
  18
  19    /* compute hinting for previous point! */
  20 +  if (ppoints == NULL) Error0i("RRCurveTo: No previous point!\n");
  21    FindStems( currx, curry, currx-ppoints[numppoints-2].x, curry-ppoints[numppoints-2].y, dx1, dy1);
  22
  23    /* Allocate three new path points and pre-setup data */
  24 @@ -1903,6 +1905,7 @@
  25      FindStems( currx, curry, 0, 0, dx, dy);
  26    }
  27    else {
  28 +    if (ppoints == NULL) Error0i("RMoveTo: No previous point!\n");
  29      FindStems( currx, curry, ppoints[numppoints-2].x, ppoints[numppoints-2].y, dx, dy);
  30    }
  31