[freetype2] master 3e79254: * src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter (#50573).

[Werner LEMBERG]

branch: master
commit 3e79254ae73ba4e5f951967b42d38b0aa1460af8
Author: Werner Lemberg <address@hidden>
Commit: Werner Lemberg <address@hidden>

    * src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter (#50573).
    
    The problematic font that exceeds the old limit is Lato-Regular,
    version 2.007, containing bytecode generated by a buggy version of
    ttfautohint.
---
 ChangeLog               | 8 ++++++++
 src/truetype/ttinterp.c | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index a0ec37b..ea14f23 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,13 @@
 2017-03-18  Werner Lemberg  <address@hidden>
 
+       * src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter (#50573).
+
+       The problematic font that exceeds the old limit is Lato-Regular,
+       version 2.007, containing bytecode generated by a buggy version of
+       ttfautohint.
+
+2017-03-18  Werner Lemberg  <address@hidden>
+
        [truetype] Another limitation for bytecode loop count maximum.
 
        Reported as
diff --git a/src/truetype/ttinterp.c b/src/truetype/ttinterp.c
index f4f89b0..000c30b 100644
--- a/src/truetype/ttinterp.c
+++ b/src/truetype/ttinterp.c
@@ -7626,7 +7626,7 @@
                                           exc->cvtSize / 10 );
     else
       exc->loopcall_counter_max = FT_MAX( 100,
-                                          5 * exc->cvtSize );
+                                          10 * exc->cvtSize );
 
     /* as a protection against an unreasonable number of CVT entries  */
     /* we assume at most 100 control values per glyph for the counter */