Skip to content

GSUB/GPOS: stop following zero list offsets in the blob byteswap - #82

Open
pdoane wants to merge 1 commit into
JimmyLefevre:mainfrom
pdoane:gsub-gpos-bounds
Open

pdoane wants to merge 1 commit into
JimmyLefevre:mainfrom
pdoane:gsub-gpos-bounds

Conversation

@pdoane

@pdoane pdoane commented Sep 3, 2026

Copy link
Copy Markdown

The blob byteswap followed the script, feature and lookup list offsets of a GSUB or GPOS table even when they were zero, reading outside the table. A zero list offset now means no list, and a table too short to hold the header is skipped.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant