walkero
/
harfbuzz
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Bug 592484 - invalid write in HB 

Fix off-by-one.
This commit is contained in:
Behdad Esfahbod 2009-08-20 14:01:37 -04:00
parent b614b00472
commit f0c7540c4e
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/hb-ot-layout.cc
View File

@ -226,8 +226,8 @@ _hb_ot_layout_set_glyph_class (hb_face_t *face,
unsigned char *new_klasses; unsigned char *new_klasses;
new_len = len == 0 ? 120 : 2 * len; new_len = len == 0 ? 120 : 2 * len;
if (new_len > 65535) if (new_len > 65536)
new_len = 65535; new_len = 65536;
new_klasses = (unsigned char *) realloc (layout->new_gdef.klasses, new_len * sizeof (unsigned char)); new_klasses = (unsigned char *) realloc (layout->new_gdef.klasses, new_len * sizeof (unsigned char));
if (HB_UNLIKELY (!new_klasses)) if (HB_UNLIKELY (!new_klasses))