svn commit: r1936894 - pdfbox/branches/2.0/fontbox/src/main/java/org/apache/fontbox/ttf

[tilman]

Author: tilman
Date: Wed Aug  5 09:28:38 2026
New Revision: 1936894

Log:
PDFBOX-6231: protect against wide nested composite glyphs

Modified:
   
pdfbox/branches/2.0/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java

Modified: 
pdfbox/branches/2.0/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java
==============================================================================
--- 
pdfbox/branches/2.0/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java
 Wed Aug  5 09:00:00 2026        (r1936893)
+++ 
pdfbox/branches/2.0/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java
 Wed Aug  5 09:28:38 2026        (r1936894)
@@ -102,6 +102,12 @@ public class GlyfCompositeDescript exten
 
         for (GlyfCompositeComp comp : components)
         {
+            if (firstIndex > Short.MAX_VALUE)
+            {
+                // PDFBOX-6231: protect against wide nested composite glyphs
+                LOG.error("firstIndex is " + firstIndex + ", aborting 
resolve");
+                break;
+            }
             comp.setFirstIndex(firstIndex);
             comp.setFirstContour(firstContour);