Hi,

out of curiosity, has Apple contacted the FreeType dev group concerning http://www.vupen.com/english/advisories/2010/2018 ("FreeType Compact Font Format Two Buffer Overflow Vulnerabilities")? Even if it's not a serious problem on anything that isn't iOS, a problem with opcode parsing might also lead to the incorrect execution of opcode-based CFF glyph rendering; it would be nice to know where it's going wrong, so that normal fonts (i.e., not created specifically to exploit the problem) that make use of the problematic opcode patterns can be identified.

- Mike "Pomax" Kamermans
nihongoresources.com

_______________________________________________
Freetype mailing list
[email protected]
http://lists.nongnu.org/mailman/listinfo/freetype

Reply via email to