commit 699d6e4d8415a5d94483ea81fdf277964a33b8f1
author Akira TAGOH <akira@tagoh.org> Wed Jan 23 05:59:24 2019 +0000
committer Akira TAGOH <akira@tagoh.org> Wed Jan 23 05:59:34 2019 +0000
tree 3e2c958b11e389fd1ac6351f585b5143a3a00963
parent b047e299546ac3abb79cf0bac3c67f5c2dfc7fb6

Fix a crash with invalid matrix element

Fixes https://gitlab.freedesktop.org/fontconfig/fontconfig/issues/140

src/fcxml.c

diff --git a/src/fcxml.c b/src/fcxml.c
index fb60df2..103b248 100644
--- a/src/fcxml.c
+++ b/src/fcxml.c
@@ -1480,6 +1480,11 @@
     m.xy = FcPopExpr (parse);
     m.xx = FcPopExpr (parse);
 
+    if (!m.yy || !m.yx || !m.xy || !m.xx)
+    {
+	FcConfigMessage (parse, FcSevereWarning, "Missing values in matrix element");
+	return;
+    }
     if (FcPopExpr (parse))
       FcConfigMessage (parse, FcSevereError, "wrong number of matrix elements");
     else