summaryrefslogtreecommitdiff
path: root/pango/opentype/hb-ot-layout-gpos-private.hh
diff options
context:
space:
mode:
Diffstat (limited to 'pango/opentype/hb-ot-layout-gpos-private.hh')
-rw-r--r--pango/opentype/hb-ot-layout-gpos-private.hh2
1 files changed, 1 insertions, 1 deletions
diff --git a/pango/opentype/hb-ot-layout-gpos-private.hh b/pango/opentype/hb-ot-layout-gpos-private.hh
index e357b01c..6b20716d 100644
--- a/pango/opentype/hb-ot-layout-gpos-private.hh
+++ b/pango/opentype/hb-ot-layout-gpos-private.hh
@@ -565,7 +565,7 @@ struct PairPosFormat2
SANITIZE_THIS2 (classDef1, classDef2) &&
SANITIZE_MEM (values,
(valueFormat1.get_size () + valueFormat2.get_size ()) *
- class1Count * class2Count);
+ class1Count * class2Count); /* XXX overflow (in other places too) */
}
private: