From 07abd0c0bbddef1eed84969e9d8b7ba5f548d0d9 Mon Sep 17 00:00:00 2001 From: Alex Cherepanov Date: Tue, 23 Apr 2013 00:54:24 -0400 Subject: Bug 687604: Reject out-of-bounds access to cvt table. Revert the patch b550e8c460daa0647fd1f4ce63ae3c73edc75a5c because it is not needed now, but it causes SEGV when cvt table is missing. --- gs/base/ttinterp.c | 8 -------- 1 file changed, 8 deletions(-) diff --git a/gs/base/ttinterp.c b/gs/base/ttinterp.c index b76385796..5e06e06aa 100644 --- a/gs/base/ttinterp.c +++ b/gs/base/ttinterp.c @@ -2479,16 +2479,8 @@ static int nInstrCount=0; int index; if ( BOUNDS( args[0], CUR.cvtSize ) ) { -#if 0 CUR.error = TT_Err_Invalid_Reference; return; -#else - /* A workaround for the Ghostscript Bug 687604. - Ported from FreeType 2 : !FT_LOAD_PEDANTIC by default. */ - index=args[0]; - args[0] = 0; - DBG_PRINT1(" cvt[%d] stubbed with 0", index); -#endif } index=args[0]; args[0] = CUR_Func_read_cvt( index ); -- cgit v1.2.1