[freetype2] master 0bf95b5 1/2: [cff] Fix CFF2 stack allocation.

[Werner LEMBERG]

branch: master
commit 0bf95b585e5a44e6999ebd54ad2b1913e5e885a8
Author: Dave Arnold <address@hidden>
Commit: Werner Lemberg <address@hidden>

    [cff] Fix CFF2 stack allocation.
    
    * src/cff/cffparse.c (cff_parser_init) add 1 for operator.
---
 ChangeLog         | 6 ++++++
 src/cff/cffload.c | 3 ++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 7dac7a2..86a5818 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2017-03-17  Dave Arnold <address@hidden>
+
+       [cff] Fix CFF2 stack allocation.
+
+       * src/cff/cffparse.c (cff_parser_init) add 1 for operator.
+
 2017-03-16  Werner Lemberg  <address@hidden>
 
        * src/truetype/ttgxvar.c (tt_done_blend): Free `vvar_table'.
diff --git a/src/cff/cffload.c b/src/cff/cffload.c
index d3a2af9..ed93fb5 100644
--- a/src/cff/cffload.c
+++ b/src/cff/cffload.c
@@ -1890,7 +1890,8 @@
     subfont->lenNDV = lenNDV;
     subfont->NDV    = NDV;
 
-    stackSize = font->cff2 ? font->top_font.font_dict.maxstack
+    /* add 1 for the operator */
+    stackSize = font->cff2 ? font->top_font.font_dict.maxstack + 1
                            : CFF_MAX_STACK_DEPTH + 1;
 
     if ( cff_parser_init( &parser,