summaryrefslogtreecommitdiff
path: root/xps/xpsfont.c
diff options
context:
space:
mode:
Diffstat (limited to 'xps/xpsfont.c')
-rw-r--r--xps/xpsfont.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/xps/xpsfont.c b/xps/xpsfont.c
index 7ec5416fe..61fa7a015 100644
--- a/xps/xpsfont.c
+++ b/xps/xpsfont.c
@@ -135,7 +135,7 @@ xps_find_sfnt_table(xps_font_t *font, const char *name, int *lengthp)
/* check if the buffer contains enough data to contain nfonts subfonts */
int min_len = 12 + nfonts * 4;
- if (font->length < min_len)
+ if (min_len < 0 || font->length < min_len)
{
gs_warn("font data length too small");
return -1;