diff options
Diffstat (limited to 'src/sfnt/ttcpal.c')
| -rw-r--r-- | src/sfnt/ttcpal.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/sfnt/ttcpal.c b/src/sfnt/ttcpal.c index fc78c67be..9cdcec69c 100644 --- a/src/sfnt/ttcpal.c +++ b/src/sfnt/ttcpal.c @@ -128,6 +128,9 @@ FT_UShort* q; + if ( face->palette_data.num_palettes * 2 + 3U * 4 > table_size ) + goto InvalidTable; + p += face->palette_data.num_palettes * 2; type_offset = FT_NEXT_ULONG( p ); |