diff --git a/src/truetype/ttinterp.c b/src/truetype/ttinterp.c index fc7fccdf3..abb8f13aa 100644 --- a/src/truetype/ttinterp.c +++ b/src/truetype/ttinterp.c @@ -5132,13 +5132,11 @@ /* XXX: UNDOCUMENTED! SHZ doesn't move the phantom points. */ /* Twilight zone has no real contours, so use `n_points'. */ /* Normal zone's `n_points' includes phantoms, so must */ - /* use end of last contour. */ + /* subtract them. */ if ( exc->GS.gep2 == 0 ) limit = exc->zp2.n_points; - else if ( exc->GS.gep2 == 1 && exc->zp2.n_contours > 0 ) - limit = exc->zp2.contours[exc->zp2.n_contours - 1] + 1; else - limit = 0; + limit = exc->zp2.n_points - 4U; /* XXX: UNDOCUMENTED! SHZ doesn't touch the points */ for ( i = 0; i < limit; i++ )