>From 71ff3cebfee8b393ecb7eff4d4d12167efb59b27 Mon Sep 17 00:00:00 2001
From: Alberto Garcia <agarcia@igalia.com>
Date: Thu, 17 Jun 2010 11:28:17 +0200
Subject: [PATCH] Bug 621814 - Crash in Lookup_MarkMarkPos()

---
 pango/opentype/harfbuzz-gpos.c |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/pango/opentype/harfbuzz-gpos.c b/pango/opentype/harfbuzz-gpos.c
index c78dcba..668a7d0 100644
--- a/pango/opentype/harfbuzz-gpos.c
+++ b/pango/opentype/harfbuzz-gpos.c
@@ -2990,6 +2990,9 @@ static HB_Error  Lookup_MarkMarkPos( GPOS_Instance*    gpi,
     j--;
   }
 
+  if ( i > buffer->in_pos )
+    return HB_Err_Not_Covered;
+
   error = _HB_OPEN_Coverage_Index( &mmp->Mark2Coverage, IN_GLYPH( j ),
 			  &mark2_index );
   if ( error )
-- 
1.5.6.5

