From b2c8a031a2f6fc1200868a8bee3175400cfb99fc Mon Sep 17 00:00:00 2001
From: Werner Lemberg <wl@gnu.org>
Date: Fri, 6 Mar 2026 06:29:38 +0100
Subject: [PATCH] * src/sfnt/ttgpos.c (tt_face_get_class): Fix range check.

Fixes issue #1392.
---
 src/sfnt/ttgpos.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/sfnt/ttgpos.c b/src/sfnt/ttgpos.c
index 12882fd70..3f7e96aaf 100644
--- a/src/sfnt/ttgpos.c
+++ b/src/sfnt/ttgpos.c
@@ -817,7 +817,7 @@
 
       /* XXX: Is this modulo 65536 arithmetic? */
       if ( startGlyphID              <= glyph_index &&
-           startGlyphID + glyphCount >= glyph_index )
+           startGlyphID + glyphCount > glyph_index  )
         return FT_PEEK_USHORT( p + ( glyph_index - startGlyphID ) * 2 );
     }
     else