zumun/woff2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update woff2_dec.cc range checking

Browse Source
This commit is contained in:
Rod Sheeter
2016-02-04 08:24:36 -08:00
parent ee1b44e0b4
commit d1efde9124
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/woff2_dec.cc
+3 -2
View File
@@ -26,8 +26,8 @@
#include <map>
#include <memory>
#include "./buffer.h"
#include "./decode.h"
#include "./buffer.h"
#include "./port.h"
#include "./round.h"
#include "./store_bytes.h"
@@ -1121,7 +1121,8 @@ bool ConvertWOFF2ToTTF(uint8_t* result, size_t result_length,
for (uint32_t j = 0; j < num_tables; j++) {
unsigned int table_idx;
if (PREDICT_FALSE(!Read255UShort(&file, &table_idx))) {
if (PREDICT_FALSE(!Read255UShort(&file, &table_idx)) ||
table_idx >= tables.size()) {
return FONT_COMPRESSION_FAILURE();
}
ttc_font.table_indices[j] = table_idx;