1
0
Fork 0
mirror of https://github.com/mozilla/pdf.js.git synced 2025-04-19 22:58:07 +02:00

Read a signed integer when using PUSHW in sanitizing a font (bug 1919513)

This commit is contained in:
Calixte Denizet 2024-09-18 22:09:17 +02:00
parent 19151feb5f
commit 78dd35483c
4 changed files with 10 additions and 1 deletions

View file

@ -2387,7 +2387,7 @@ class Font {
} else {
for (j = 0; j < n; j++) {
b = data[i++];
stack.push((b << 8) | data[i++]);
stack.push(signedInt16(b, data[i++]));
}
}
} else if (op === 0x2b && !tooComplexToFollowFunctions) {