From: Paul F. W. <pa...@fr...> - 2011-04-10 18:13:11
|
This crash comes from Fedora bug 694986: https://bugzilla.redhat.com/show_bug.cgi?id=694986 Reproducer, works on current git head: 1. Start FontForge and select New font. 2. Right click on '#' and select "Glyph Info". 3. Go to "TeX & Math" section 4. Hit "Guess" button next to "Depth" box. 5. Segfault. Selecting glyph info of other characters might crash if you guess Height instead of Depth. In TeX_Default(), guessing Height or Depth causes the metrics of a reference glyph to be looked up, to be applied to the current glyph and if the chosen reference glyph doesn't exist yet, SplineCharFindBounds() will crash. The crash happens because the pointer to the current splinechar will be replaced by the reference splinechar, even if that turns out to be NULL. The minimal patch, supplied, simply replaces the current splinechar pointer if finding a reference didn't work out. That allows the lines below to run (and return metrics of 0). -- Paul Flo Williams http://hisdeedsaredust.com/category/fonts/feed |