tree 6d4e466115cebb0ede96f658de5cd08731dfd2b2
parent b5e003f1f2866940a9c5bb1632f79ed76161f839
author Ben Wagner <bungeman@chromium.org> 1634824528 -0400
committer Alexei Podtelezhnikov <apodtele@gmail.com> 1634824528 -0400

[mm] Delay setting blend weight and design position.

Previously the `blend->weight_vector`, `blend->default_weight_vector`,
and `blend->design_pos` were set early to allocated but uninitialized
memory under the assumption that the memory would eventually be
initialized. However, it is possible that some of the required
keywords may not actually be present, leaving the memory uninitialized.
This is different from a present but invalid table, which would produce
an error.

Reported as
  https://bugs.chromium.org/p/chromium/issues/detail?id=1261762

* src/type1/t1load.c (t1_allocate_blend): Remove early allocation and
initialization.
(parse_blend_design_positions, parse_weight_vector): Parse into local
and assign to blend if valid.
(T1_Open_Face): Check that if a blend exists that it has the weight
vector and design positions.