[HarfBuzz] OOB write in hb_buffer_t::replace_glyph()

[Kenichi Ishibashi]

Hi,

I've been testing Harfbuzz-ng with valgrind and found OOB write in
hb_buffer_t::replace_glyph(). Patch for fixing it is attached.

Thanks,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/harfbuzz/attachments/20111019/c9eaaf67/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Make-sure-buffer-size-in-replace_glyph.patch
Type: application/octet-stream
Size: 672 bytes
Desc: not available
URL: <http://lists.freedesktop.org/archives/harfbuzz/attachments/20111019/c9eaaf67/attachment.obj>