[Fribidi-discuss] Out-of-bounds read in run_length_encode_types

[Behdad Esfahbod]

Thanks a lot Owen, I will fixed it.

Yours,
Behdad

On 4 Dec 2001, Owen Taylor wrote:

> 
> http://bugzilla.gnome.org/show_bug.cgi?id=66067; I checked and
> the same problem occurs in CVS HEAD.
> 
> Regards,
>                                         Owen
> ====
> This is occurring while in:
>             run_length_encode_types [mini-fribidifribidi.c:153]
>                  current.pos = -1;
>                  for (i = 0; i <= type_len; i++)
>                    {
>             => if (char_type[i] != current.type || i == type_len)
>                        {
>                          if (current.pos >= 0)
>                            {
>             fribidi_analyse_string [mini-fribidifribidi.c:594]
>             pango_log2vis_get_embedding_levels [mini-fribidifribidi.c:1081]
>             pango_itemize  [pangopango-context.c:406]
>             pango_layout_check_lines [pangopango-layout.c:2905]
>             pango_layout_get_extents_internal [pangopango-layout.c:1878]
> 
> A fix is to test i == type_len first.
>              if (i == type_len || char_type[i] != current.type)
> 
> 
> _______________________________________________
> Fribidi-discuss mailing list
> Fribidi-discuss at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/fribidi-discuss
> 

-- 
Behdad
14 Azar 1380, 2001 Dec 5

[Finger for Geek Code]