shithub: freetype+ttf2subf

Download patch

ref: f70d9342e65cd2cb44e9f26b6d7edeedf191fc6c
parent: 73be9f9ab67842cfbec36ee99e8d2301434c84ca
author: Werner Lemberg <[email protected]>
date: Mon Nov 24 04:31:32 EST 2014 

[sfnt] Fix Savannah bug #43672.

* src/sfnt/ttkern.c (tt_face_load_kern): Use correct value for
minimum table length test.

git/fs: mount .git/fs: mount/attach disallowed 
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,12 @@
 2014-11-24  Werner Lemberg  <[email protected]>
 
+	[sfnt] Fix Savannah bug #43672.
+
+	* src/sfnt/ttkern.c (tt_face_load_kern): Use correct value for
+	minimum table length test.
+
+2014-11-24  Werner Lemberg  <[email protected]>
+
 	[type1, type42] Another fix for Savannah bug #43655.
 
 	* src/type1/t1load.c (parse_charstrings), src/type42/t42parse.c
--- a/src/sfnt/ttkern.c
+++ b/src/sfnt/ttkern.c
@@ -99,7 +99,7 @@
       length   = FT_NEXT_USHORT( p );
       coverage = FT_NEXT_USHORT( p );
 
-      if ( length <= 6 )
+      if ( length <= 6 + 8 )
         break;
 
       p_next += length;