diff options
Diffstat (limited to 'libparsesfnt_parse___.c')
| -rw-r--r-- | libparsesfnt_parse___.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/libparsesfnt_parse___.c b/libparsesfnt_parse___.c index 17ee018..6e89dc0 100644 --- a/libparsesfnt_parse___.c +++ b/libparsesfnt_parse___.c @@ -122,6 +122,7 @@ libparsesfnt_parse___(const char *data, size_t size, void *infop, size_t esize, if (offset + count * need > size || (tag && (tag->length < count * need || tag->length > size || + tag->offset > size - tag->length || tag_offset > tag->length || first + count > (tag->length - tag_offset) / need))) goto ebfont; |