b3c194
From 8d435c463d22f6de35015b244d6f9bb433beb7e6 Mon Sep 17 00:00:00 2001
b3c194
From: Werner Lemberg <wl@gnu.org>
b3c194
Date: Thu, 1 Jun 2017 07:09:44 +0200
b3c194
Subject: [PATCH] * src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter
b3c194
 again.
b3c194
MIME-Version: 1.0
b3c194
Content-Type: text/plain; charset=UTF-8
b3c194
Content-Transfer-Encoding: 8bit
b3c194
b3c194
Problem reported by Marek Kašík <mkasik@redhat.com>.
b3c194
b3c194
The problematic font that exceeds the old limit is Padauk-Bold,
b3c194
version 3.002, containing bytecode generated by a buggy version of
b3c194
ttfautohint.
b3c194
---
b3c194
 ChangeLog               | 10 ++++++++++
b3c194
 src/truetype/ttinterp.c |  3 +--
b3c194
 2 files changed, 11 insertions(+), 2 deletions(-)
b3c194
b3c194
diff --git a/src/truetype/ttinterp.c b/src/truetype/ttinterp.c
b3c194
index 0c48c256..775d1104 100644
b3c194
--- a/src/truetype/ttinterp.c
b3c194
+++ b/src/truetype/ttinterp.c
b3c194
@@ -7649,8 +7649,7 @@
b3c194
                                   FT_MAX( 50,
b3c194
                                           exc->cvtSize / 10 );
b3c194
     else
b3c194
-      exc->loopcall_counter_max = FT_MAX( 100,
b3c194
-                                          10 * exc->cvtSize );
b3c194
+      exc->loopcall_counter_max = 300 + 8 * exc->cvtSize;
b3c194
 
b3c194
     /* as a protection against an unreasonable number of CVT entries  */
b3c194
     /* we assume at most 100 control values per glyph for the counter */
b3c194
-- 
b3c194
2.13.0
b3c194