Blame SOURCES/fontforge-20170731-cve-2020-5395-followup-fix.patch

da3bdb
From b96273acc691ac8a36c6a8dd4de8e6edd7eaae59 Mon Sep 17 00:00:00 2001
da3bdb
From: Fredrick Brennan <copypaste@kittens.ph>
da3bdb
Date: Tue, 21 Jan 2020 15:16:00 +0800
da3bdb
Subject: [PATCH] Fix crash on exit introduced in previous commit
da3bdb
da3bdb
When the number of layers is greater than 2, as in Chomsky.sfd and most
da3bdb
of my other fonts, FontForge will crash on exiting.
da3bdb
da3bdb
This is just a simple mistake @skef made.
da3bdb
---
da3bdb
 fontforge/sfd.c | 2 +-
da3bdb
 1 file changed, 1 insertion(+), 1 deletion(-)
da3bdb
da3bdb
diff --git a/fontforge/sfd.c b/fontforge/sfd.c
da3bdb
index e8ca39ba83..9517d8cb12 100644
da3bdb
--- a/fontforge/sfd.c
da3bdb
+++ b/fontforge/sfd.c
da3bdb
@@ -7998,9 +7998,9 @@ bool SFD_GetFontMetaData( FILE *sfd,
da3bdb
 	int layer_cnt_tmp;
da3bdb
 	getint(sfd,&layer_cnt_tmp);
da3bdb
 	if ( layer_cnt_tmp>2 ) {
da3bdb
+	    sf->layer_cnt = layer_cnt_tmp;
da3bdb
 	    sf->layers = realloc(sf->layers,sf->layer_cnt*sizeof(LayerInfo));
da3bdb
 	    memset(sf->layers+2,0,(sf->layer_cnt-2)*sizeof(LayerInfo));
da3bdb
-	    sf->layer_cnt = layer_cnt_tmp;
da3bdb
 	}
da3bdb
     }
da3bdb
     else if ( strmatch(tok,"Layer:")==0 )