fix for subset fuzzer failure
A called subr must be freshly parsed or completely parsed. otherwise the prevoius parse must have terminated prematurely
diff --git a/src/hb-subset-cff1.cc b/src/hb-subset-cff1.cc
index 383ffb2..aa5bee6 100644
--- a/src/hb-subset-cff1.cc
+++ b/src/hb-subset-cff1.cc
@@ -390,6 +390,9 @@
param.current_parsed_str->add_call_op (op, substr, env.context.subr_num);
hb_set_add (closure, env.context.subr_num);
param.set_current_str (env);
+ if ( unlikely (!param.current_parsed_str->is_parsed ()
+ && (param.current_parsed_str->values.len > 0)))
+ env.set_error ();
}
private:
