[kern] Adjust some more

Getting closer.  So many open questions still...

src/hb-ot-kern-table.hh

@@ -266,13 +266,9 @@ struct KernSubTableFormat1
 	}
 
 	hb_mask_t kern_mask = c->plan->kern_mask;
-	for (unsigned int i = 0; i < depth; i++)
+	while (depth--)
 	{
-	  /* Apparently, when spec says "Each pops one glyph from the kerning stack
+	  unsigned int idx = stack[depth];
-	   * and applies the kerning value to it.", it doesn't mean it in that order.
-	   * The deepest item in the stack corresponds to the first item in the action
-	   * list.  Discovered by testing. */
-	  unsigned int idx = stack[i];
 	  int v = *actions++;
 
 	  /* The following two flags are undocumented in the spec, but described
@@ -291,32 +287,44 @@ struct KernSubTableFormat1
 	    {
 	      if (crossStream)
 	      {
-	        /* XXX Why negative, not positive?!?! */
+		if (!buffer->pos[idx].y_offset)
-	        crossOffset -= v;
 		  buffer->pos[idx].y_offset += c->font->em_scale_y (crossOffset);
+	        /* XXX Why negative, not positive?!?! */
+	        v = -v;
+		crossOffset += v;
 	      }
 	      else
+	      {
+		if (!buffer->pos[idx].x_offset)
 		{
 		  buffer->pos[idx].x_advance += c->font->em_scale_x (v);
-		if (last)
 		  buffer->pos[idx].x_offset += c->font->em_scale_x (v);
 		}
 	      }
+	    }
 	    else
 	    {
 	      if (crossStream)
 	      {
+	        /* CoreText doesn't do crossStream kerning in vertical. */
+#if 0
+		if (!buffer->pos[idx].x_offset)
+		  buffer->pos[idx].x_offset = c->font->em_scale_x (crossOffset);
+#endif
+	        /* XXX Why negative, not positive?!?! */
+	        v = -v;
 		crossOffset += v;
-		buffer->pos[idx].x_offset += c->font->em_scale_x (crossOffset);
 	      }
 	      else
+	      {
+		if (!buffer->pos[idx].y_offset)
 		{
 		  buffer->pos[idx].y_advance += c->font->em_scale_y (v);
-		if (last)
 		  buffer->pos[idx].y_offset += c->font->em_scale_y (v);
 		}
 	      }
 	    }
+	  }
 	  if (last)
 	    break;
 	}