You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pdfbox.apache.org by ti...@apache.org on 2026/08/05 09:28:44 UTC
svn commit: r1936896 - pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf
Author: tilman
Date: Wed Aug 5 09:28:44 2026
New Revision: 1936896
Log:
PDFBOX-6231: protect against wide nested composite glyphs
Modified:
pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java
Modified: pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java
==============================================================================
--- pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java Wed Aug 5 09:28:41 2026 (r1936895)
+++ pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java Wed Aug 5 09:28:44 2026 (r1936896)
@@ -101,6 +101,12 @@ public class GlyfCompositeDescript exten
for (GlyfCompositeComp comp : components)
{
+ if (firstIndex > Short.MAX_VALUE)
+ {
+ // PDFBOX-6231: protect against wide nested composite glyphs
+ LOG.error("firstIndex is {}, aborting resolve", firstIndex);
+ break;
+ }
comp.setFirstIndex(firstIndex);
comp.setFirstContour(firstContour);