texlive[50777] Build/source/texk/dvipng/dvipng-src/pk.c: one more

[commits+karl at tug.org]

Revision: 50777
          http://tug.org/svn/texlive?view=revision&revision=50777
Author:   karl
Date:     2019-04-05 17:49:39 +0200 (Fri, 05 Apr 2019)
Log Message:
-----------
one more packet_length check

Modified Paths:
--------------
    trunk/Build/source/texk/dvipng/dvipng-src/pk.c

Modified: trunk/Build/source/texk/dvipng/dvipng-src/pk.c
===================================================================
--- trunk/Build/source/texk/dvipng/dvipng-src/pk.c	2019-04-05 15:10:11 UTC (rev 50776)
+++ trunk/Build/source/texk/dvipng/dvipng-src/pk.c	2019-04-05 15:49:39 UTC (rev 50777)
@@ -383,6 +383,11 @@
   tcharptr->length = packet_length;
   tcharptr->pkdata = position;
   tfontp->chr[c]=tcharptr;
+  if (tfontp->fmmap.size
+      < (char *)position-tfontp->fmmap.data + packet_length) {
+    Fatal("file too short (%u) to read past packet_length %u",
+          tfontp->fmmap.size, packet_length);
+  }
   position += packet_length;
   position = skip_specials(position);
   }