File CVE-2012-1142.patch of Package freetype2.418

Overview Repositories Revisions Requests Users Attributes Meta

File CVE-2012-1142.patch of Package freetype2.418

---
 src/winfonts/winfnt.c |   11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

Index: freetype-2.4.4/src/winfonts/winfnt.c
===================================================================
--- freetype-2.4.4.orig/src/winfonts/winfnt.c
+++ freetype-2.4.4/src/winfonts/winfnt.c
@@ -4,7 +4,7 @@
 /*                                                                         */
 /*    FreeType font driver for Windows FNT/FON files                       */
 /*                                                                         */
-/*  Copyright 1996-2001, 2002, 2003, 2004, 2006, 2007, 2008, 2009, 2010 by */
+/*  Copyright 1996-2004, 2006-2012 by                                      */
 /*  David Turner, Robert Wilhelm, and Werner Lemberg.                      */
 /*  Copyright 2003 Huw D M Davies for Codeweavers                          */
 /*  Copyright 2007 Dmitry Timoshkov for Codeweavers                        */
@@ -827,7 +827,14 @@
           root->charmap = root->charmaps[0];
       }
 
-      /* setup remaining flags */
+      /* set up remaining flags */
+
+      if ( font->header.last_char < font->header.first_char )
+      {
+        FT_TRACE2(( "invalid number of glyphs\n" ));
+        error = FNT_Err_Invalid_File_Format;
+        goto Fail;
+      }
 
       /* reserve one slot for the .notdef glyph at index 0 */
       root->num_glyphs = font->header.last_char -

Places

File CVE-2012-1142.patch of Package freetype2.418

Places