svn commit: r1936896 - pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf

[tilman]

Author: tilman
Date: Wed Aug  5 09:28:44 2026
New Revision: 1936896

Log:
PDFBOX-6231: protect against wide nested composite glyphs

Modified:
   
pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java

Modified: 
pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java
==============================================================================
--- 
pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java
        Wed Aug  5 09:28:41 2026        (r1936895)
+++ 
pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/ttf/GlyfCompositeDescript.java
        Wed Aug  5 09:28:44 2026        (r1936896)
@@ -101,6 +101,12 @@ public class GlyfCompositeDescript exten
 
         for (GlyfCompositeComp comp : components)
         {
+            if (firstIndex > Short.MAX_VALUE)
+            {
+                // PDFBOX-6231: protect against wide nested composite glyphs
+                LOG.error("firstIndex is {}, aborting resolve", firstIndex);
+                break;
+            }
             comp.setFirstIndex(firstIndex);
             comp.setFirstContour(firstContour);