Marmelator/pdf.js.mirror
1
0
Fork 0
mirror of https://github.com/mozilla/pdf.js.git synced 2026-04-09 23:04:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix wrong values when sanitizing fonts

Browse Source 
NPUSHW: push signed 16-bits integer: https://learn.microsoft.com/en-us/typography/opentype/spec/tt_instructions#push-n-words
indexToLocFormat: field in the 'head' table: https://developer.apple.com/fonts/TrueType-Reference-Manual/RM06/Chap6head.html#:~:text=indexToLocFormat,-0
This commit is contained in:
Calixte Denizet 2026-04-02 18:13:10 +02:00
parent 1bd4c4fbde
commit 535c8d13c2
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/core/fonts.js
View File

@ -2029,7 +2029,7 @@ class Font {
data[3] = 0;
}
const indexToLocFormat = int16(data[50], data[51]);
const indexToLocFormat = signedInt16(data[50], data[51]);
if (indexToLocFormat < 0 || indexToLocFormat > 1) {
info(
"Attempting to fix invalid indexToLocFormat in head table: " +
@ -2397,7 +2397,7 @@ class Font {
} else {
for (j = 0; j < n; j++) {
b = data[i++];
stack.push((b << 8) | data[i++]);
stack.push(signedInt16(b, data[i++]));
}
}
} else if ((op & 0xf8) === 0xb0) {