[truetype] Better protection against malformed GX data (#46166). * src/truetype/ttgxvar.c (TT_Vary_Apply_Glyph_Deltas): Correctly handle empty `localpoints' array.
diff --git a/ChangeLog b/ChangeLog
index 4cc2e53..20e8b47 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,12 @@
2015-10-10 Werner Lemberg <wl@gnu.org>
+ [truetype] Better protection against malformed GX data (#46166).
+
+ * src/truetype/ttgxvar.c (TT_Vary_Apply_Glyph_Deltas): Correctly
+ handle empty `localpoints' array.
+
+2015-10-10 Werner Lemberg <wl@gnu.org>
+
* src/pcf/pcfread.c (pcf_read_TOC): Check stream size (#46162).
2015-10-09 Werner Lemberg <wl@gnu.org>
diff --git a/src/truetype/ttgxvar.c b/src/truetype/ttgxvar.c
index dd9e250..e838b87 100644
--- a/src/truetype/ttgxvar.c
+++ b/src/truetype/ttgxvar.c
@@ -1950,6 +1950,9 @@
#endif
}
+ else if ( localpoints == NULL )
+ ; /* failure, ignore it */
+
else
{
#ifdef FT_DEBUG_LEVEL_TRACE