suzuki toshiya 73aa20ca1d [cff] Truncate the element length at the end of the stream.
See Savannah bug #30975.

* src/cff/cffload.c (cff_index_access_element): `off2', the
offset to the next element is truncated at the end of the
stream to prevent invalid I/O.  As `off1', the offset to the
requested element has been checked by FT_STREAM_SEEK(),
`off2' should be checked similarly.
2010-09-20 01:31:42 +09:00
..
2010-07-12 21:13:22 +02:00
2010-09-14 09:02:10 +02:00
2010-07-12 21:13:22 +02:00
2010-06-08 08:37:11 +02:00
2010-07-12 21:13:22 +02:00
2010-07-12 21:13:22 +02:00
2010-07-09 20:50:34 +09:00
2010-08-29 17:24:30 +02:00
2010-07-11 09:28:21 +02:00
2010-07-12 21:13:22 +02:00
2010-08-05 23:15:26 +02:00
2005-06-04 23:04:30 +00:00