Re: [ft] FreeType 2.4.1 has been released

[Michiel Kamermans]

Hi,

out of curiosity, has Apple contacted the FreeType dev group concerning 
http://www.vupen.com/english/advisories/2010/2018 ("FreeType Compact 
Font Format Two Buffer Overflow Vulnerabilities")? Even if it's not a 
serious problem on anything that isn't iOS, a problem with opcode 
parsing might also lead to the incorrect execution of opcode-based CFF 
glyph rendering; it would be nice to know where it's going wrong, so 
that normal fonts (i.e., not created specifically to exploit the 
problem) that make use of the problematic opcode patterns can be identified.

- Mike "Pomax" Kamermans
nihongoresources.com