tree 3426fe09bc484cfed96ffb893b46b73de3439890
parent 41fa19fceaba5f8588456472f0990664115062f5
author Dominik Röttsches <drott@chromium.org> 1623151751 +0300
committer Dominik Röttsches <drott@chromium.org> 1623151751 +0300

[sfnt] Pointer validity check when reading COLR 'v1' layers

* src/sfnt/ttcolr.c (tt_face_get_paint_layers): In addition to the
existing sanity checks, ensure that the pointer to the layer to be
read is within the 'COLR' v1 table.