* src/truetype/ttinterp.c (Ins_SHZ): Fix the range limit (cont'd).

Fixes
    https://issues.oss-fuzz.com/issues/505900175
This commit is contained in:
Alexei Podtelezhnikov 2026-04-23 21:54:58 -04:00
parent 1803559c4e
commit 7d600a022e

View file

@ -5135,8 +5135,10 @@
/* subtract them. */
if ( exc->GS.gep2 == 0 )
limit = exc->zp2.n_points;
else
else if ( exc->zp2.n_points > 4U )
limit = exc->zp2.n_points - 4U;
else
return;
/* XXX: UNDOCUMENTED! SHZ doesn't touch the points */
for ( i = 0; i < limit; i++ )