* src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter (#50573).
The problematic font that exceeds the old limit is Lato-Regular,
version 2.007, containing bytecode generated by a buggy version of
ttfautohint.
diff --git a/ChangeLog b/ChangeLog
index a0ec37b..ea14f23 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,13 @@
2017-03-18 Werner Lemberg <wl@gnu.org>
+ * src/truetype/ttinterp.c (TT_RunIns): Adjust loop counter (#50573).
+
+ The problematic font that exceeds the old limit is Lato-Regular,
+ version 2.007, containing bytecode generated by a buggy version of
+ ttfautohint.
+
+2017-03-18 Werner Lemberg <wl@gnu.org>
+
[truetype] Another limitation for bytecode loop count maximum.
Reported as
diff --git a/src/truetype/ttinterp.c b/src/truetype/ttinterp.c
index f4f89b0..000c30b 100644
--- a/src/truetype/ttinterp.c
+++ b/src/truetype/ttinterp.c
@@ -7626,7 +7626,7 @@
exc->cvtSize / 10 );
else
exc->loopcall_counter_max = FT_MAX( 100,
- 5 * exc->cvtSize );
+ 10 * exc->cvtSize );
/* as a protection against an unreasonable number of CVT entries */
/* we assume at most 100 control values per glyph for the counter */
