PDFBOX-5817: detect extreme componentCount value

git-svn-id: https://svn.apache.org/repos/asf/pdfbox/trunk@1917593 13f79535-47bb-0310-9956-ffa450edef68
apache · May 9, 2024 · 0651078 · 0651078
1 parent 3188e7b
commit 0651078
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/fontbox/src/main/java/org/apache/fontbox/ttf/GlyphSubstitutionTable.java b/fontbox/src/main/java/org/apache/fontbox/ttf/GlyphSubstitutionTable.java
@@ -610,6 +610,11 @@ private LigatureTable readLigatureTable(TTFDataStream data, long ligatureTableLo
         int ligatureGlyph = data.readUnsignedShort();
 
         int componentCount = data.readUnsignedShort();
+        if (componentCount > 100)
+        {
+            throw new IOException("componentCount in ligature table is " +
+                    componentCount + ", font likely corrupt");
+        }
 
         int[] componentGlyphIDs = new int[componentCount];