diff --git a/src/sfnt/ttbdf.c b/src/sfnt/ttbdf.c index bd2a94b9d..4aa182703 100644 --- a/src/sfnt/ttbdf.c +++ b/src/sfnt/ttbdf.c @@ -97,7 +97,7 @@ if ( version != 0x0001 || strings < 8 || ( strings - 8 ) / 4 < num_strikes || - strings + 1 > length ) + strings >= length ) goto BadTable; bdf->num_strikes = num_strikes;