diff options
author | Norbert Preining <preining@logic.at> | 2018-09-19 04:02:06 +0000 |
---|---|---|
committer | Norbert Preining <preining@logic.at> | 2018-09-19 04:02:06 +0000 |
commit | 945e3295915cf8a3cbd54872724cab28530e120f (patch) | |
tree | d33dc2ce0c046f2ff36c54e5d871ab43207dab96 /Build/source/texk/web2c/luatexdir/font | |
parent | 977b5f9cac35f42e2409b60d6e793a3327d54647 (diff) |
writet1 protection against buffer overflow
git-svn-id: svn://tug.org/texlive/trunk@48697 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/web2c/luatexdir/font')
-rw-r--r-- | Build/source/texk/web2c/luatexdir/font/writet1.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/Build/source/texk/web2c/luatexdir/font/writet1.c b/Build/source/texk/web2c/luatexdir/font/writet1.c index 0a0cadcfb93..d3bf29341c1 100644 --- a/Build/source/texk/web2c/luatexdir/font/writet1.c +++ b/Build/source/texk/web2c/luatexdir/font/writet1.c @@ -1581,7 +1581,9 @@ static void t1_check_unusual_charstring(void) if (sscanf(p, "%i", &i) != 1) { strcpy(t1_buf_array, t1_line_array); t1_getline(); + alloc_array(t1_buf, strlen(t1_line_array) + strlen(t1_buf_array) + 1, T1_BUF_SIZE); strcat(t1_buf_array, t1_line_array); + alloc_array(t1_line, strlen(t1_buf_array) + 1, T1_BUF_SIZE); strcpy(t1_line_array, t1_buf_array); t1_line_ptr = eol(t1_line_array); } |