]>
Commit | Line | Data |
---|---|---|
24d9e476 AG |
1 | diff -burN cups-1.1.23.orig/pdftops/FontFile.cxx cups-1.1.23/pdftops/FontFile.cxx |
2 | --- cups-1.1.23.orig/pdftops/FontFile.cxx 2005-09-02 19:02:24.273122328 +0200 | |
3 | +++ cups-1.1.23/pdftops/FontFile.cxx 2005-09-02 19:02:39.174856920 +0200 | |
4 | @@ -18,6 +18,7 @@ | |
5 | #include <stdarg.h> | |
6 | #include <string.h> | |
7 | #include <ctype.h> | |
8 | +#include <error.h> | |
9 | #include "gmem.h" | |
10 | #include "GHash.h" | |
11 | #include "Error.h" | |
12 | @@ -3572,6 +3573,9 @@ | |
13 | } else { | |
14 | origLocaTable[i].pos = 2 * getUShort(pos + 2*i); | |
15 | } | |
16 | + | |
17 | + if (origLocaTable[i].pos < 0 || origLocaTable[i].pos > len) | |
18 | + error (1, 0, "bad loca table pos value"); | |
19 | } | |
20 | qsort(origLocaTable, nGlyphs + 1, sizeof(TrueTypeLoca), &cmpTrueTypeLocaPos); | |
21 | for (i = 0; i < nGlyphs; ++i) { |