diff --git a/contrib/sdk/sources/freetype/src/sfnt/ttsbit.c b/contrib/sdk/sources/freetype/src/sfnt/ttsbit.c index cd3e5a4a0..6b019b880 100644 --- a/contrib/sdk/sources/freetype/src/sfnt/ttsbit.c +++ b/contrib/sdk/sources/freetype/src/sfnt/ttsbit.c @@ -234,9 +234,11 @@ p += 34; decoder->bit_depth = *p; - if ( decoder->strike_index_array > face->sbit_table_size || - decoder->strike_index_array + 8 * decoder->strike_index_count > - face->sbit_table_size ) + /* decoder->strike_index_array + */ + /* 8 * decoder->strike_index_count > face->sbit_table_size ? */ + if ( decoder->strike_index_array > face->sbit_table_size || + decoder->strike_index_count > + ( face->sbit_table_size - decoder->strike_index_array ) / 8 ) error = FT_THROW( Invalid_File_Format ); }