[Pkg-fonts-bugs] Bug#432762: fontforge: segfaults during scrolling

[Eugeniy Meshcheryakov]

Package: fontforge
Version: 0.0.20070607-3
Severity: important
Tags: patch

Fontforge segfaults during scrolling (using PgDown button) of main window
when DejaVuSans font is loaded. It segfaults just after showing first
page with characters outside BMP.

Problem is in code like this:

   unicode_backtrans[ch>>8][ch&0xff]

Here unicode_backtrans is array with 256 memebers, ch is character code
with value larger than 0xffff. So unicode_backtrans[ch>>8] gives some
junk that than dereferenced.

Attached patch fixes this by returning 0 for such expressions.

There is also code like this:

    unicode_backtrans[ch>>8])!=NULL

It allway returns 1 for all valid values of ch, so probably should be
removed. Attached patch does not do this.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.22-me (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=uk_UA.UTF-8, LC_CTYPE=uk_UA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages fontforge depends on:
ii  libc6                   2.6-2            GNU C Library: Shared libraries
ii  libfreetype6            2.3.5-1          FreeType 2 font engine, shared lib
ii  libice6                 1:1.0.3-2        X11 Inter-Client Exchange library
ii  libjpeg62               6b-13            The Independent JPEG Group's JPEG 
ii  libpng12-0              1.2.15~beta5-2   PNG library - runtime
ii  libsm6                  2:1.0.3-1+b1     X11 Session Management library
ii  libtiff4                3.8.2-7          Tag Image File Format (TIFF) libra
ii  libungif4g              4.1.4-5+b1       shared library for GIF images
ii  libuninameslist0        0.0.20060907-2   a library of Unicode annotation da
ii  libx11-6                2:1.0.3-7        X11 client-side library
ii  libxi6                  2:1.1.1-1        X11 Input extension library
ii  libxml2                 2.6.29.dfsg-1    GNOME XML library
ii  python2.4               2.4.4-4          An interactive high-level object-o
ii  zlib1g                  1:1.2.3.3.dfsg-5 compression library - runtime

fontforge recommends no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 1000_gdraw_segfault_fix.diff
Type: text/x-c
Size: 2376 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-fonts-bugs/attachments/20070711/bdf847dd/attachment.bin