| commit | ff8c8b2dfd829fd7b352355cbaf0052a998cc09d | [log] [tgz] |
|---|---|---|
| author | Chris Palmer <palmer@google.com> | Mon Aug 09 14:13:40 2010 -0700 |
| committer | Chris Palmer <palmer@google.com> | Mon Aug 09 14:13:40 2010 -0700 |
| tree | 8a73191ecfc89f38ed77eb934b819525713c9158 | |
| parent | bdbe09c32468272311d49ac8539c0378cf16ca08 [diff] |
Apply stack overflow patch from http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=11d65e8a1f1f14e56148fd991965424d9bd1cdbc Change-Id: I2df2f52928358225d53b22bcf258f36812d2515d
diff --git a/src/cff/cffgload.c b/src/cff/cffgload.c index 9330c05..4e17eb6 100644 --- a/src/cff/cffgload.c +++ b/src/cff/cffgload.c
@@ -2448,7 +2448,10 @@ return CFF_Err_Unimplemented_Feature; } - decoder->top = args; + decoder->top = args; + + if ( decoder->top - stack >= CFF_MAX_OPERANDS ) + goto Stack_Overflow; } /* general operator processing */