You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pdfbox.apache.org by ja...@apache.org on 2014/08/19 19:14:09 UTC
svn commit: r1618901 -
/pdfbox/branches/no-awt/fontbox/src/main/java/org/apache/fontbox/ttf/HorizontalMetricsTable.java
Author: jahewson
Date: Tue Aug 19 17:14:09 2014
New Revision: 1618901
URL: http://svn.apache.org/r1618901
Log:
PDFBOX-2262: Don't read beyond end of hmtx table
Modified:
pdfbox/branches/no-awt/fontbox/src/main/java/org/apache/fontbox/ttf/HorizontalMetricsTable.java
Modified: pdfbox/branches/no-awt/fontbox/src/main/java/org/apache/fontbox/ttf/HorizontalMetricsTable.java
URL: http://svn.apache.org/viewvc/pdfbox/branches/no-awt/fontbox/src/main/java/org/apache/fontbox/ttf/HorizontalMetricsTable.java?rev=1618901&r1=1618900&r2=1618901&view=diff
==============================================================================
--- pdfbox/branches/no-awt/fontbox/src/main/java/org/apache/fontbox/ttf/HorizontalMetricsTable.java (original)
+++ pdfbox/branches/no-awt/fontbox/src/main/java/org/apache/fontbox/ttf/HorizontalMetricsTable.java Tue Aug 19 17:14:09 2014
@@ -63,7 +63,11 @@ public class HorizontalMetricsTable exte
nonHorizontalLeftSideBearing = new short[ numberNonHorizontal ];
for( int i=0; i<numberNonHorizontal; i++ )
{
- nonHorizontalLeftSideBearing[i] = data.readSignedShort();
+ if (bytesRead < getLength())
+ {
+ nonHorizontalLeftSideBearing[i] = data.readSignedShort();
+ bytesRead += 2;
+ }
}
}