Fix buffer overflow in copying PS name
As reported on the mailing list by Tanel Liiv. Found using American Fuzzy Lop.
This commit is contained in:
parent
32ac7c75e8
commit
fc7e1a9497
|
@ -1556,7 +1556,8 @@ FcFreeTypeQueryFace (const FT_Face face,
|
|||
}
|
||||
else
|
||||
{
|
||||
strcpy (psname, tmp);
|
||||
strncpy (psname, tmp, 255);
|
||||
psname[255] = 0;
|
||||
}
|
||||
if (!FcPatternAddString (pat, FC_POSTSCRIPT_NAME, (const FcChar8 *)psname))
|
||||
goto bail1;
|
||||
|
|
Loading…
Reference in New Issue