On 09/06/2012 02:47 PM, Harshula wrote: >> > ALLOCATE_ARRAY (const HB_UChar16, item.string, chars_len); >> > + ALLOCATE_ARRAY (unsigned short, item.log_clusters, chars_len + 2); > Why is the length "chars_len + 2"?
1. I *think* old harfbuzz also adds a final entry to that array, 2. It's widely reported (from Chromium people for example) that some of the old HarfBuzz backends (Tibetan IIRC) make an off-by-one access past that array. In short: to be on the safe side. behdad _______________________________________________ HarfBuzz mailing list HarfBuzz@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/harfbuzz