mirror of
https://github.com/mozilla/pdf.js.git
synced 2025-04-19 22:58:07 +02:00
Read a signed integer when using PUSHW in sanitizing a font (bug 1919513)
This commit is contained in:
parent
19151feb5f
commit
78dd35483c
4 changed files with 10 additions and 1 deletions
|
@ -2387,7 +2387,7 @@ class Font {
|
|||
} else {
|
||||
for (j = 0; j < n; j++) {
|
||||
b = data[i++];
|
||||
stack.push((b << 8) | data[i++]);
|
||||
stack.push(signedInt16(b, data[i++]));
|
||||
}
|
||||
}
|
||||
} else if (op === 0x2b && !tooComplexToFollowFunctions) {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue