You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@pdfbox.apache.org by ti...@apache.org on 2024/05/09 07:42:15 UTC

svn commit: r1917593 - /pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyphSubstitutionTable.java

Author: tilman
Date: Thu May  9 07:42:15 2024
New Revision: 1917593

URL: http://svn.apache.org/viewvc?rev=1917593&view=rev
Log:
PDFBOX-5817: detect extreme componentCount value

Modified:
    pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyphSubstitutionTable.java

Modified: pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyphSubstitutionTable.java
URL: http://svn.apache.org/viewvc/pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyphSubstitutionTable.java?rev=1917593&r1=1917592&r2=1917593&view=diff
==============================================================================
--- pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyphSubstitutionTable.java (original)
+++ pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyphSubstitutionTable.java Thu May  9 07:42:15 2024
@@ -610,6 +610,11 @@ public class GlyphSubstitutionTable exte
         int ligatureGlyph = data.readUnsignedShort();
 
         int componentCount = data.readUnsignedShort();
+        if (componentCount > 100)
+        {
+            throw new IOException("componentCount in ligature table is " +
+                    componentCount + ", font likely corrupt");
+        }
 
         int[] componentGlyphIDs = new int[componentCount];