fdo-mirrors/cairo
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/cairo/cairo.git synced 2026-05-08 07:58:02 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

truetype: check cmap size before allocating memory

Browse source 
Fixes #264
This commit is contained in:
Adrian Johnson 2021-07-23 18:32:44 +09:30
parent e5e63a0462
commit ae04679a08
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/cairo-truetype-subset.c
View file

@ -1297,6 +1297,10 @@ _cairo_truetype_reverse_cmap (cairo_scaled_font_t *scaled_font,
return CAIRO_INT_STATUS_UNSUPPORTED;
size = be16_to_cpu (map_header.length);
/* minimum table size is 24 bytes */
if (size < 24)
return CAIRO_INT_STATUS_UNSUPPORTED;
map = _cairo_malloc (size);
if (unlikely (map == NULL))
return _cairo_error (CAIRO_STATUS_NO_MEMORY);