[ft-devel] Another bug in TTF parser

[Victor Stinner]

In src/sfnt/sfobjs.c, near line 582, function sfnt_load_face(): LOAD(cmap) may 
fails whereas error code is not used :-/

If it fails, loader->cmap_table is NULL but it is used later 
(tt_face_build_cmaps() called by sfnt_load_face()).

Lines around the bug:
    /* the following tables are often not present in embedded TrueType */
    /* fonts within PDF documents, so don't check for them.            */
    LOAD_( maxp );
    LOAD_( cmap );

To fix the bug:
    Check error error
 or Fix tt_face_build_cmaps()

File with the bug:
  http://www.haypocalc.com/tmp/null_cmap.ttf

Victor
-- 
Victor Stinner aka haypo
http://hachoir.org/