1 /***************************************************************************/
2 /*                                                                         */
3 /*  ttload.c                                                               */
4 /*                                                                         */
5 /*    Load the basic TrueType tables, i.e., tables that can be either in   */
6 /*    TTF or OTF fonts (body).                                             */
7 /*                                                                         */
8 /*  Copyright 1996-2015 by                                                 */
9 /*  David Turner, Robert Wilhelm, and Werner Lemberg.                      */
10 /*                                                                         */
11 /*  This file is part of the FreeType project, and may only be used,       */
12 /*  modified, and distributed under the terms of the FreeType project      */
13 /*  license, LICENSE.TXT.  By continuing to use, modify, or distribute     */
14 /*  this file you indicate that you have read the license and              */
15 /*  understand and accept it fully.                                        */
16 /*                                                                         */
17 /***************************************************************************/
18 
19 
20 #include <ft2build.h>
21 #include FT_INTERNAL_DEBUG_H
22 #include FT_INTERNAL_STREAM_H
23 #include FT_TRUETYPE_TAGS_H
24 #include "ttload.h"
25 
26 #include "sferrors.h"
27 
28 
29   /*************************************************************************/
30   /*                                                                       */
31   /* The macro FT_COMPONENT is used in trace mode.  It is an implicit      */
32   /* parameter of the FT_TRACE() and FT_ERROR() macros, used to print/log  */
33   /* messages during execution.                                            */
34   /*                                                                       */
35 #undef  FT_COMPONENT
36 #define FT_COMPONENT  trace_ttload
37 
38 
39   /*************************************************************************/
40   /*                                                                       */
41   /* <Function>                                                            */
42   /*    tt_face_lookup_table                                               */
43   /*                                                                       */
44   /* <Description>                                                         */
45   /*    Looks for a TrueType table by name.                                */
46   /*                                                                       */
47   /* <Input>                                                               */
48   /*    face :: A face object handle.                                      */
49   /*                                                                       */
50   /*    tag  :: The searched tag.                                          */
51   /*                                                                       */
52   /* <Return>                                                              */
53   /*    A pointer to the table directory entry.  0 if not found.           */
54   /*                                                                       */
55   FT_LOCAL_DEF( TT_Table  )
tt_face_lookup_table(TT_Face face,FT_ULong tag)56   tt_face_lookup_table( TT_Face   face,
57                         FT_ULong  tag  )
58   {
59     TT_Table  entry;
60     TT_Table  limit;
61 #ifdef FT_DEBUG_LEVEL_TRACE
62     FT_Bool   zero_length = FALSE;
63 #endif
64 
65 
66     FT_TRACE4(( "tt_face_lookup_table: %08p, `%c%c%c%c' -- ",
67                 face,
68                 (FT_Char)( tag >> 24 ),
69                 (FT_Char)( tag >> 16 ),
70                 (FT_Char)( tag >> 8  ),
71                 (FT_Char)( tag       ) ));
72 
73     entry = face->dir_tables;
74     limit = entry + face->num_tables;
75 
76     for ( ; entry < limit; entry++ )
77     {
78       /* For compatibility with Windows, we consider    */
79       /* zero-length tables the same as missing tables. */
80       if ( entry->Tag == tag )
81       {
82         if ( entry->Length != 0 )
83         {
84           FT_TRACE4(( "found table.\n" ));
85           return entry;
86         }
87 #ifdef FT_DEBUG_LEVEL_TRACE
88         zero_length = TRUE;
89 #endif
90       }
91     }
92 
93 #ifdef FT_DEBUG_LEVEL_TRACE
94     if ( zero_length )
95       FT_TRACE4(( "ignoring empty table\n" ));
96     else
97       FT_TRACE4(( "could not find table\n" ));
98 #endif
99 
100     return NULL;
101   }
102 
103 
104   /*************************************************************************/
105   /*                                                                       */
106   /* <Function>                                                            */
107   /*    tt_face_goto_table                                                 */
108   /*                                                                       */
109   /* <Description>                                                         */
110   /*    Looks for a TrueType table by name, then seek a stream to it.      */
111   /*                                                                       */
112   /* <Input>                                                               */
113   /*    face   :: A face object handle.                                    */
114   /*                                                                       */
115   /*    tag    :: The searched tag.                                        */
116   /*                                                                       */
117   /*    stream :: The stream to seek when the table is found.              */
118   /*                                                                       */
119   /* <Output>                                                              */
120   /*    length :: The length of the table if found, undefined otherwise.   */
121   /*                                                                       */
122   /* <Return>                                                              */
123   /*    FreeType error code.  0 means success.                             */
124   /*                                                                       */
125   FT_LOCAL_DEF( FT_Error )
tt_face_goto_table(TT_Face face,FT_ULong tag,FT_Stream stream,FT_ULong * length)126   tt_face_goto_table( TT_Face    face,
127                       FT_ULong   tag,
128                       FT_Stream  stream,
129                       FT_ULong*  length )
130   {
131     TT_Table  table;
132     FT_Error  error;
133 
134 
135     table = tt_face_lookup_table( face, tag );
136     if ( table )
137     {
138       if ( length )
139         *length = table->Length;
140 
141       if ( FT_STREAM_SEEK( table->Offset ) )
142         goto Exit;
143     }
144     else
145       error = FT_THROW( Table_Missing );
146 
147   Exit:
148     return error;
149   }
150 
151 
152   /* Here, we                                                         */
153   /*                                                                  */
154   /* - check that `num_tables' is valid (and adjust it if necessary); */
155   /*   also return the number of valid table entries                  */
156   /*                                                                  */
157   /* - look for a `head' table, check its size, and parse it to check */
158   /*   whether its `magic' field is correctly set                     */
159   /*                                                                  */
160   /* - errors (except errors returned by stream handling)             */
161   /*                                                                  */
162   /*     SFNT_Err_Unknown_File_Format:                                */
163   /*       no table is defined in directory, it is not sfnt-wrapped   */
164   /*       data                                                       */
165   /*     SFNT_Err_Table_Missing:                                      */
166   /*       table directory is valid, but essential tables             */
167   /*       (head/bhed/SING) are missing                               */
168   /*                                                                  */
169   static FT_Error
check_table_dir(SFNT_Header sfnt,FT_Stream stream,FT_UShort * valid)170   check_table_dir( SFNT_Header  sfnt,
171                    FT_Stream    stream,
172                    FT_UShort*   valid )
173   {
174     FT_Error   error;
175     FT_UShort  nn, valid_entries = 0;
176     FT_UInt    has_head = 0, has_sing = 0, has_meta = 0;
177     FT_ULong   offset = sfnt->offset + 12;
178 
179     static const FT_Frame_Field  table_dir_entry_fields[] =
180     {
181 #undef  FT_STRUCTURE
182 #define FT_STRUCTURE  TT_TableRec
183 
184       FT_FRAME_START( 16 ),
185         FT_FRAME_ULONG( Tag ),
186         FT_FRAME_ULONG( CheckSum ),
187         FT_FRAME_ULONG( Offset ),
188         FT_FRAME_ULONG( Length ),
189       FT_FRAME_END
190     };
191 
192 
193     if ( FT_STREAM_SEEK( offset ) )
194       goto Exit;
195 
196     for ( nn = 0; nn < sfnt->num_tables; nn++ )
197     {
198       TT_TableRec  table;
199 
200 
201       if ( FT_STREAM_READ_FIELDS( table_dir_entry_fields, &table ) )
202       {
203         nn--;
204         FT_TRACE2(( "check_table_dir:"
205                     " can read only %d table%s in font (instead of %d)\n",
206                     nn, nn == 1 ? "" : "s", sfnt->num_tables ));
207         sfnt->num_tables = nn;
208         break;
209       }
210 
211       /* we ignore invalid tables */
212 
213       if ( table.Offset > stream->size )
214       {
215         FT_TRACE2(( "check_table_dir: table entry %d invalid\n", nn ));
216         continue;
217       }
218       else if ( table.Length > stream->size - table.Offset )
219       {
220         /* Some tables have such a simple structure that clipping its     */
221         /* contents is harmless.  This also makes FreeType less sensitive */
222         /* to invalid table lengths (which programs like Acroread seem to */
223         /* ignore in general).                                            */
224 
225         if ( table.Tag == TTAG_hmtx ||
226              table.Tag == TTAG_vmtx )
227           valid_entries++;
228         else
229         {
230           FT_TRACE2(( "check_table_dir: table entry %d invalid\n", nn ));
231           continue;
232         }
233       }
234       else
235         valid_entries++;
236 
237       if ( table.Tag == TTAG_head || table.Tag == TTAG_bhed )
238       {
239         FT_UInt32  magic;
240 
241 
242 #ifndef TT_CONFIG_OPTION_EMBEDDED_BITMAPS
243         if ( table.Tag == TTAG_head )
244 #endif
245           has_head = 1;
246 
247         /*
248          * The table length should be 0x36, but certain font tools make it
249          * 0x38, so we will just check that it is greater.
250          *
251          * Note that according to the specification, the table must be
252          * padded to 32-bit lengths, but this doesn't apply to the value of
253          * its `Length' field!
254          *
255          */
256         if ( table.Length < 0x36 )
257         {
258           FT_TRACE2(( "check_table_dir:"
259                       " `head' or `bhed' table too small\n" ));
260           error = FT_THROW( Table_Missing );
261           goto Exit;
262         }
263 
264         if ( FT_STREAM_SEEK( table.Offset + 12 ) ||
265              FT_READ_ULONG( magic )              )
266           goto Exit;
267 
268         if ( magic != 0x5F0F3CF5UL )
269           FT_TRACE2(( "check_table_dir:"
270                       " invalid magic number in `head' or `bhed' table\n"));
271 
272         if ( FT_STREAM_SEEK( offset + ( nn + 1 ) * 16 ) )
273           goto Exit;
274       }
275       else if ( table.Tag == TTAG_SING )
276         has_sing = 1;
277       else if ( table.Tag == TTAG_META )
278         has_meta = 1;
279     }
280 
281     *valid = valid_entries;
282 
283     if ( !valid_entries )
284     {
285       FT_TRACE2(( "check_table_dir: no valid tables found\n" ));
286       error = FT_THROW( Unknown_File_Format );
287       goto Exit;
288     }
289 
290     /* if `sing' and `meta' tables are present, there is no `head' table */
291     if ( has_head || ( has_sing && has_meta ) )
292     {
293       error = FT_Err_Ok;
294       goto Exit;
295     }
296     else
297     {
298       FT_TRACE2(( "check_table_dir:" ));
299 #ifdef TT_CONFIG_OPTION_EMBEDDED_BITMAPS
300       FT_TRACE2(( " neither `head', `bhed', nor `sing' table found\n" ));
301 #else
302       FT_TRACE2(( " neither `head' nor `sing' table found\n" ));
303 #endif
304       error = FT_THROW( Table_Missing );
305     }
306 
307   Exit:
308     return error;
309   }
310 
311 
312   /*************************************************************************/
313   /*                                                                       */
314   /* <Function>                                                            */
315   /*    tt_face_load_font_dir                                              */
316   /*                                                                       */
317   /* <Description>                                                         */
318   /*    Loads the header of a SFNT font file.                              */
319   /*                                                                       */
320   /* <Input>                                                               */
321   /*    face       :: A handle to the target face object.                  */
322   /*                                                                       */
323   /*    stream     :: The input stream.                                    */
324   /*                                                                       */
325   /* <Output>                                                              */
326   /*    sfnt       :: The SFNT header.                                     */
327   /*                                                                       */
328   /* <Return>                                                              */
329   /*    FreeType error code.  0 means success.                             */
330   /*                                                                       */
331   /* <Note>                                                                */
332   /*    The stream cursor must be at the beginning of the font directory.  */
333   /*                                                                       */
334   FT_LOCAL_DEF( FT_Error )
tt_face_load_font_dir(TT_Face face,FT_Stream stream)335   tt_face_load_font_dir( TT_Face    face,
336                          FT_Stream  stream )
337   {
338     SFNT_HeaderRec  sfnt;
339     FT_Error        error;
340     FT_Memory       memory = stream->memory;
341     FT_UShort       nn, valid_entries;
342 
343     static const FT_Frame_Field  offset_table_fields[] =
344     {
345 #undef  FT_STRUCTURE
346 #define FT_STRUCTURE  SFNT_HeaderRec
347 
348       FT_FRAME_START( 8 ),
349         FT_FRAME_USHORT( num_tables ),
350         FT_FRAME_USHORT( search_range ),
351         FT_FRAME_USHORT( entry_selector ),
352         FT_FRAME_USHORT( range_shift ),
353       FT_FRAME_END
354     };
355 
356 
357     FT_TRACE2(( "tt_face_load_font_dir: %08p\n", face ));
358 
359     /* read the offset table */
360 
361     sfnt.offset = FT_STREAM_POS();
362 
363     if ( FT_READ_ULONG( sfnt.format_tag )                    ||
364          FT_STREAM_READ_FIELDS( offset_table_fields, &sfnt ) )
365       goto Exit;
366 
367     /* many fonts don't have these fields set correctly */
368 #if 0
369     if ( sfnt.search_range != 1 << ( sfnt.entry_selector + 4 )        ||
370          sfnt.search_range + sfnt.range_shift != sfnt.num_tables << 4 )
371       return FT_THROW( Unknown_File_Format );
372 #endif
373 
374     /* load the table directory */
375 
376     FT_TRACE2(( "-- Number of tables: %10u\n",    sfnt.num_tables ));
377     FT_TRACE2(( "-- Format version:   0x%08lx\n", sfnt.format_tag ));
378 
379     if ( sfnt.format_tag != TTAG_OTTO )
380     {
381       /* check first */
382       error = check_table_dir( &sfnt, stream, &valid_entries );
383       if ( error )
384       {
385         FT_TRACE2(( "tt_face_load_font_dir:"
386                     " invalid table directory for TrueType\n" ));
387         goto Exit;
388       }
389     }
390     else
391       valid_entries = sfnt.num_tables;
392 
393     face->num_tables = valid_entries;
394     face->format_tag = sfnt.format_tag;
395 
396     if ( FT_QNEW_ARRAY( face->dir_tables, face->num_tables ) )
397       goto Exit;
398 
399     if ( FT_STREAM_SEEK( sfnt.offset + 12 )      ||
400          FT_FRAME_ENTER( sfnt.num_tables * 16L ) )
401       goto Exit;
402 
403     FT_TRACE2(( "\n"
404                 "  tag    offset    length   checksum\n"
405                 "  ----------------------------------\n" ));
406 
407     valid_entries = 0;
408     for ( nn = 0; nn < sfnt.num_tables; nn++ )
409     {
410       TT_TableRec  entry;
411       FT_UShort    i;
412       FT_Bool      duplicate;
413 
414 
415       entry.Tag      = FT_GET_TAG4();
416       entry.CheckSum = FT_GET_ULONG();
417       entry.Offset   = FT_GET_ULONG();
418       entry.Length   = FT_GET_ULONG();
419 
420       /* ignore invalid tables that can't be sanitized */
421 
422       if ( entry.Offset > stream->size )
423         continue;
424       else if ( entry.Length > stream->size - entry.Offset )
425       {
426         if ( entry.Tag == TTAG_hmtx ||
427              entry.Tag == TTAG_vmtx )
428         {
429 #ifdef FT_DEBUG_LEVEL_TRACE
430           FT_ULong  old_length = entry.Length;
431 #endif
432 
433 
434           /* make metrics table length a multiple of 4 */
435           entry.Length = ( stream->size - entry.Offset ) & ~3U;
436 
437           FT_TRACE2(( "  %c%c%c%c  %08lx  %08lx  %08lx"
438                       " (sanitized; original length %08lx)",
439                       (FT_Char)( entry.Tag >> 24 ),
440                       (FT_Char)( entry.Tag >> 16 ),
441                       (FT_Char)( entry.Tag >> 8  ),
442                       (FT_Char)( entry.Tag       ),
443                       entry.Offset,
444                       entry.Length,
445                       entry.CheckSum,
446                       old_length ));
447         }
448         else
449           continue;
450       }
451 #ifdef FT_DEBUG_LEVEL_TRACE
452       else
453         FT_TRACE2(( "  %c%c%c%c  %08lx  %08lx  %08lx",
454                     (FT_Char)( entry.Tag >> 24 ),
455                     (FT_Char)( entry.Tag >> 16 ),
456                     (FT_Char)( entry.Tag >> 8  ),
457                     (FT_Char)( entry.Tag       ),
458                     entry.Offset,
459                     entry.Length,
460                     entry.CheckSum ));
461 #endif
462 
463       /* ignore duplicate tables – the first one wins */
464       duplicate = 0;
465       for ( i = 0; i < valid_entries; i++ )
466       {
467         if ( face->dir_tables[i].Tag == entry.Tag )
468         {
469           duplicate = 1;
470           break;
471         }
472       }
473       if ( duplicate )
474       {
475         FT_TRACE2(( "  (duplicate, ignored)\n" ));
476         continue;
477       }
478       else
479       {
480         FT_TRACE2(( "\n" ));
481 
482         /* we finally have a valid entry */
483         face->dir_tables[valid_entries++] = entry;
484       }
485     }
486 
487     /* final adjustment to number of tables */
488     face->num_tables = valid_entries;
489 
490     FT_FRAME_EXIT();
491 
492     FT_TRACE2(( "table directory loaded\n\n" ));
493 
494   Exit:
495     return error;
496   }
497 
498 
499   /*************************************************************************/
500   /*                                                                       */
501   /* <Function>                                                            */
502   /*    tt_face_load_any                                                   */
503   /*                                                                       */
504   /* <Description>                                                         */
505   /*    Loads any font table into client memory.                           */
506   /*                                                                       */
507   /* <Input>                                                               */
508   /*    face   :: The face object to look for.                             */
509   /*                                                                       */
510   /*    tag    :: The tag of table to load.  Use the value 0 if you want   */
511   /*              to access the whole font file, else set this parameter   */
512   /*              to a valid TrueType table tag that you can forge with    */
513   /*              the MAKE_TT_TAG macro.                                   */
514   /*                                                                       */
515   /*    offset :: The starting offset in the table (or the file if         */
516   /*              tag == 0).                                               */
517   /*                                                                       */
518   /*    length :: The address of the decision variable:                    */
519   /*                                                                       */
520   /*                If length == NULL:                                     */
521   /*                  Loads the whole table.  Returns an error if          */
522   /*                  `offset' == 0!                                       */
523   /*                                                                       */
524   /*                If *length == 0:                                       */
525   /*                  Exits immediately; returning the length of the given */
526   /*                  table or of the font file, depending on the value of */
527   /*                  `tag'.                                               */
528   /*                                                                       */
529   /*                If *length != 0:                                       */
530   /*                  Loads the next `length' bytes of table or font,      */
531   /*                  starting at offset `offset' (in table or font too).  */
532   /*                                                                       */
533   /* <Output>                                                              */
534   /*    buffer :: The address of target buffer.                            */
535   /*                                                                       */
536   /* <Return>                                                              */
537   /*    FreeType error code.  0 means success.                             */
538   /*                                                                       */
539   FT_LOCAL_DEF( FT_Error )
tt_face_load_any(TT_Face face,FT_ULong tag,FT_Long offset,FT_Byte * buffer,FT_ULong * length)540   tt_face_load_any( TT_Face    face,
541                     FT_ULong   tag,
542                     FT_Long    offset,
543                     FT_Byte*   buffer,
544                     FT_ULong*  length )
545   {
546     FT_Error   error;
547     FT_Stream  stream;
548     TT_Table   table;
549     FT_ULong   size;
550 
551 
552     if ( tag != 0 )
553     {
554       /* look for tag in font directory */
555       table = tt_face_lookup_table( face, tag );
556       if ( !table )
557       {
558         error = FT_THROW( Table_Missing );
559         goto Exit;
560       }
561 
562       offset += table->Offset;
563       size    = table->Length;
564     }
565     else
566       /* tag == 0 -- the user wants to access the font file directly */
567       size = face->root.stream->size;
568 
569     if ( length && *length == 0 )
570     {
571       *length = size;
572 
573       return FT_Err_Ok;
574     }
575 
576     if ( length )
577       size = *length;
578 
579     stream = face->root.stream;
580     /* the `if' is syntactic sugar for picky compilers */
581     if ( FT_STREAM_READ_AT( offset, buffer, size ) )
582       goto Exit;
583 
584   Exit:
585     return error;
586   }
587 
588 
589   /*************************************************************************/
590   /*                                                                       */
591   /* <Function>                                                            */
592   /*    tt_face_load_generic_header                                        */
593   /*                                                                       */
594   /* <Description>                                                         */
595   /*    Loads the TrueType table `head' or `bhed'.                         */
596   /*                                                                       */
597   /* <Input>                                                               */
598   /*    face   :: A handle to the target face object.                      */
599   /*                                                                       */
600   /*    stream :: The input stream.                                        */
601   /*                                                                       */
602   /* <Return>                                                              */
603   /*    FreeType error code.  0 means success.                             */
604   /*                                                                       */
605   static FT_Error
tt_face_load_generic_header(TT_Face face,FT_Stream stream,FT_ULong tag)606   tt_face_load_generic_header( TT_Face    face,
607                                FT_Stream  stream,
608                                FT_ULong   tag )
609   {
610     FT_Error    error;
611     TT_Header*  header;
612 
613     static const FT_Frame_Field  header_fields[] =
614     {
615 #undef  FT_STRUCTURE
616 #define FT_STRUCTURE  TT_Header
617 
618       FT_FRAME_START( 54 ),
619         FT_FRAME_ULONG ( Table_Version ),
620         FT_FRAME_ULONG ( Font_Revision ),
621         FT_FRAME_LONG  ( CheckSum_Adjust ),
622         FT_FRAME_LONG  ( Magic_Number ),
623         FT_FRAME_USHORT( Flags ),
624         FT_FRAME_USHORT( Units_Per_EM ),
625         FT_FRAME_LONG  ( Created[0] ),
626         FT_FRAME_LONG  ( Created[1] ),
627         FT_FRAME_LONG  ( Modified[0] ),
628         FT_FRAME_LONG  ( Modified[1] ),
629         FT_FRAME_SHORT ( xMin ),
630         FT_FRAME_SHORT ( yMin ),
631         FT_FRAME_SHORT ( xMax ),
632         FT_FRAME_SHORT ( yMax ),
633         FT_FRAME_USHORT( Mac_Style ),
634         FT_FRAME_USHORT( Lowest_Rec_PPEM ),
635         FT_FRAME_SHORT ( Font_Direction ),
636         FT_FRAME_SHORT ( Index_To_Loc_Format ),
637         FT_FRAME_SHORT ( Glyph_Data_Format ),
638       FT_FRAME_END
639     };
640 
641 
642     error = face->goto_table( face, tag, stream, 0 );
643     if ( error )
644       goto Exit;
645 
646     header = &face->header;
647 
648     if ( FT_STREAM_READ_FIELDS( header_fields, header ) )
649       goto Exit;
650 
651     FT_TRACE3(( "Units per EM: %4u\n", header->Units_Per_EM ));
652     FT_TRACE3(( "IndexToLoc:   %4d\n", header->Index_To_Loc_Format ));
653 
654   Exit:
655     return error;
656   }
657 
658 
659   FT_LOCAL_DEF( FT_Error )
tt_face_load_head(TT_Face face,FT_Stream stream)660   tt_face_load_head( TT_Face    face,
661                      FT_Stream  stream )
662   {
663     return tt_face_load_generic_header( face, stream, TTAG_head );
664   }
665 
666 
667 #ifdef TT_CONFIG_OPTION_EMBEDDED_BITMAPS
668 
669   FT_LOCAL_DEF( FT_Error )
tt_face_load_bhed(TT_Face face,FT_Stream stream)670   tt_face_load_bhed( TT_Face    face,
671                      FT_Stream  stream )
672   {
673     return tt_face_load_generic_header( face, stream, TTAG_bhed );
674   }
675 
676 #endif /* TT_CONFIG_OPTION_EMBEDDED_BITMAPS */
677 
678 
679   /*************************************************************************/
680   /*                                                                       */
681   /* <Function>                                                            */
682   /*    tt_face_load_max_profile                                           */
683   /*                                                                       */
684   /* <Description>                                                         */
685   /*    Loads the maximum profile into a face object.                      */
686   /*                                                                       */
687   /* <Input>                                                               */
688   /*    face   :: A handle to the target face object.                      */
689   /*                                                                       */
690   /*    stream :: The input stream.                                        */
691   /*                                                                       */
692   /* <Return>                                                              */
693   /*    FreeType error code.  0 means success.                             */
694   /*                                                                       */
695   FT_LOCAL_DEF( FT_Error )
tt_face_load_maxp(TT_Face face,FT_Stream stream)696   tt_face_load_maxp( TT_Face    face,
697                      FT_Stream  stream )
698   {
699     FT_Error        error;
700     TT_MaxProfile*  maxProfile = &face->max_profile;
701 
702     static const FT_Frame_Field  maxp_fields[] =
703     {
704 #undef  FT_STRUCTURE
705 #define FT_STRUCTURE  TT_MaxProfile
706 
707       FT_FRAME_START( 6 ),
708         FT_FRAME_LONG  ( version ),
709         FT_FRAME_USHORT( numGlyphs ),
710       FT_FRAME_END
711     };
712 
713     static const FT_Frame_Field  maxp_fields_extra[] =
714     {
715       FT_FRAME_START( 26 ),
716         FT_FRAME_USHORT( maxPoints ),
717         FT_FRAME_USHORT( maxContours ),
718         FT_FRAME_USHORT( maxCompositePoints ),
719         FT_FRAME_USHORT( maxCompositeContours ),
720         FT_FRAME_USHORT( maxZones ),
721         FT_FRAME_USHORT( maxTwilightPoints ),
722         FT_FRAME_USHORT( maxStorage ),
723         FT_FRAME_USHORT( maxFunctionDefs ),
724         FT_FRAME_USHORT( maxInstructionDefs ),
725         FT_FRAME_USHORT( maxStackElements ),
726         FT_FRAME_USHORT( maxSizeOfInstructions ),
727         FT_FRAME_USHORT( maxComponentElements ),
728         FT_FRAME_USHORT( maxComponentDepth ),
729       FT_FRAME_END
730     };
731 
732 
733     error = face->goto_table( face, TTAG_maxp, stream, 0 );
734     if ( error )
735       goto Exit;
736 
737     if ( FT_STREAM_READ_FIELDS( maxp_fields, maxProfile ) )
738       goto Exit;
739 
740     maxProfile->maxPoints             = 0;
741     maxProfile->maxContours           = 0;
742     maxProfile->maxCompositePoints    = 0;
743     maxProfile->maxCompositeContours  = 0;
744     maxProfile->maxZones              = 0;
745     maxProfile->maxTwilightPoints     = 0;
746     maxProfile->maxStorage            = 0;
747     maxProfile->maxFunctionDefs       = 0;
748     maxProfile->maxInstructionDefs    = 0;
749     maxProfile->maxStackElements      = 0;
750     maxProfile->maxSizeOfInstructions = 0;
751     maxProfile->maxComponentElements  = 0;
752     maxProfile->maxComponentDepth     = 0;
753 
754     if ( maxProfile->version >= 0x10000L )
755     {
756       if ( FT_STREAM_READ_FIELDS( maxp_fields_extra, maxProfile ) )
757         goto Exit;
758 
759       /* XXX: an adjustment that is necessary to load certain */
760       /*      broken fonts like `Keystrokes MT' :-(           */
761       /*                                                      */
762       /*   We allocate 64 function entries by default when    */
763       /*   the maxFunctionDefs value is smaller.              */
764 
765       if ( maxProfile->maxFunctionDefs < 64 )
766         maxProfile->maxFunctionDefs = 64;
767 
768       /* we add 4 phantom points later */
769       if ( maxProfile->maxTwilightPoints > ( 0xFFFFU - 4 ) )
770       {
771         FT_TRACE0(( "tt_face_load_maxp:"
772                     " too much twilight points in `maxp' table;\n"
773                     "                  "
774                     " some glyphs might be rendered incorrectly\n" ));
775 
776         maxProfile->maxTwilightPoints = 0xFFFFU - 4;
777       }
778 
779       /* we arbitrarily limit recursion to avoid stack exhaustion */
780       if ( maxProfile->maxComponentDepth > 100 )
781       {
782         FT_TRACE0(( "tt_face_load_maxp:"
783                     " abnormally large component depth (%d) set to 100\n",
784                     maxProfile->maxComponentDepth ));
785         maxProfile->maxComponentDepth = 100;
786       }
787     }
788 
789     FT_TRACE3(( "numGlyphs: %u\n", maxProfile->numGlyphs ));
790 
791   Exit:
792     return error;
793   }
794 
795 
796   /*************************************************************************/
797   /*                                                                       */
798   /* <Function>                                                            */
799   /*    tt_face_load_name                                                  */
800   /*                                                                       */
801   /* <Description>                                                         */
802   /*    Loads the name records.                                            */
803   /*                                                                       */
804   /* <Input>                                                               */
805   /*    face   :: A handle to the target face object.                      */
806   /*                                                                       */
807   /*    stream :: The input stream.                                        */
808   /*                                                                       */
809   /* <Return>                                                              */
810   /*    FreeType error code.  0 means success.                             */
811   /*                                                                       */
812   FT_LOCAL_DEF( FT_Error )
tt_face_load_name(TT_Face face,FT_Stream stream)813   tt_face_load_name( TT_Face    face,
814                      FT_Stream  stream )
815   {
816     FT_Error      error;
817     FT_Memory     memory = stream->memory;
818     FT_ULong      table_pos, table_len;
819     FT_ULong      storage_start, storage_limit;
820     FT_UInt       count;
821     TT_NameTable  table;
822 
823     static const FT_Frame_Field  name_table_fields[] =
824     {
825 #undef  FT_STRUCTURE
826 #define FT_STRUCTURE  TT_NameTableRec
827 
828       FT_FRAME_START( 6 ),
829         FT_FRAME_USHORT( format ),
830         FT_FRAME_USHORT( numNameRecords ),
831         FT_FRAME_USHORT( storageOffset ),
832       FT_FRAME_END
833     };
834 
835     static const FT_Frame_Field  name_record_fields[] =
836     {
837 #undef  FT_STRUCTURE
838 #define FT_STRUCTURE  TT_NameEntryRec
839 
840       /* no FT_FRAME_START */
841         FT_FRAME_USHORT( platformID ),
842         FT_FRAME_USHORT( encodingID ),
843         FT_FRAME_USHORT( languageID ),
844         FT_FRAME_USHORT( nameID ),
845         FT_FRAME_USHORT( stringLength ),
846         FT_FRAME_USHORT( stringOffset ),
847       FT_FRAME_END
848     };
849 
850 
851     table         = &face->name_table;
852     table->stream = stream;
853 
854     error = face->goto_table( face, TTAG_name, stream, &table_len );
855     if ( error )
856       goto Exit;
857 
858     table_pos = FT_STREAM_POS();
859 
860 
861     if ( FT_STREAM_READ_FIELDS( name_table_fields, table ) )
862       goto Exit;
863 
864     /* Some popular Asian fonts have an invalid `storageOffset' value   */
865     /* (it should be at least "6 + 12*num_names").  However, the string */
866     /* offsets, computed as "storageOffset + entry->stringOffset", are  */
867     /* valid pointers within the name table...                          */
868     /*                                                                  */
869     /* We thus can't check `storageOffset' right now.                   */
870     /*                                                                  */
871     storage_start = table_pos + 6 + 12*table->numNameRecords;
872     storage_limit = table_pos + table_len;
873 
874     if ( storage_start > storage_limit )
875     {
876       FT_ERROR(( "tt_face_load_name: invalid `name' table\n" ));
877       error = FT_THROW( Name_Table_Missing );
878       goto Exit;
879     }
880 
881     /* Allocate the array of name records. */
882     count                 = table->numNameRecords;
883     table->numNameRecords = 0;
884 
885     if ( FT_NEW_ARRAY( table->names, count ) ||
886          FT_FRAME_ENTER( count * 12 )        )
887       goto Exit;
888 
889     /* Load the name records and determine how much storage is needed */
890     /* to hold the strings themselves.                                */
891     {
892       TT_NameEntryRec*  entry = table->names;
893 
894 
895       for ( ; count > 0; count-- )
896       {
897         if ( FT_STREAM_READ_FIELDS( name_record_fields, entry ) )
898           continue;
899 
900         /* check that the name is not empty */
901         if ( entry->stringLength == 0 )
902           continue;
903 
904         /* check that the name string is within the table */
905         entry->stringOffset += table_pos + table->storageOffset;
906         if ( entry->stringOffset                       < storage_start ||
907              entry->stringOffset + entry->stringLength > storage_limit )
908         {
909           /* invalid entry - ignore it */
910           entry->stringOffset = 0;
911           entry->stringLength = 0;
912           continue;
913         }
914 
915         entry++;
916       }
917 
918       table->numNameRecords = (FT_UInt)( entry - table->names );
919     }
920 
921     FT_FRAME_EXIT();
922 
923     /* everything went well, update face->num_names */
924     face->num_names = (FT_UShort) table->numNameRecords;
925 
926   Exit:
927     return error;
928   }
929 
930 
931   /*************************************************************************/
932   /*                                                                       */
933   /* <Function>                                                            */
934   /*    tt_face_free_names                                                 */
935   /*                                                                       */
936   /* <Description>                                                         */
937   /*    Frees the name records.                                            */
938   /*                                                                       */
939   /* <Input>                                                               */
940   /*    face :: A handle to the target face object.                        */
941   /*                                                                       */
942   FT_LOCAL_DEF( void )
tt_face_free_name(TT_Face face)943   tt_face_free_name( TT_Face  face )
944   {
945     FT_Memory     memory = face->root.driver->root.memory;
946     TT_NameTable  table  = &face->name_table;
947     TT_NameEntry  entry  = table->names;
948     FT_UInt       count  = table->numNameRecords;
949 
950 
951     if ( table->names )
952     {
953       for ( ; count > 0; count--, entry++ )
954       {
955         FT_FREE( entry->string );
956         entry->stringLength = 0;
957       }
958 
959       /* free strings table */
960       FT_FREE( table->names );
961     }
962 
963     table->numNameRecords = 0;
964     table->format         = 0;
965     table->storageOffset  = 0;
966   }
967 
968 
969   /*************************************************************************/
970   /*                                                                       */
971   /* <Function>                                                            */
972   /*    tt_face_load_cmap                                                  */
973   /*                                                                       */
974   /* <Description>                                                         */
975   /*    Loads the cmap directory in a face object.  The cmaps themselves   */
976   /*    are loaded on demand in the `ttcmap.c' module.                     */
977   /*                                                                       */
978   /* <Input>                                                               */
979   /*    face   :: A handle to the target face object.                      */
980   /*                                                                       */
981   /*    stream :: A handle to the input stream.                            */
982   /*                                                                       */
983   /* <Return>                                                              */
984   /*    FreeType error code.  0 means success.                             */
985   /*                                                                       */
986 
987   FT_LOCAL_DEF( FT_Error )
tt_face_load_cmap(TT_Face face,FT_Stream stream)988   tt_face_load_cmap( TT_Face    face,
989                      FT_Stream  stream )
990   {
991     FT_Error  error;
992 
993 
994     error = face->goto_table( face, TTAG_cmap, stream, &face->cmap_size );
995     if ( error )
996       goto Exit;
997 
998     if ( FT_FRAME_EXTRACT( face->cmap_size, face->cmap_table ) )
999       face->cmap_size = 0;
1000 
1001   Exit:
1002     return error;
1003   }
1004 
1005 
1006 
1007   /*************************************************************************/
1008   /*                                                                       */
1009   /* <Function>                                                            */
1010   /*    tt_face_load_os2                                                   */
1011   /*                                                                       */
1012   /* <Description>                                                         */
1013   /*    Loads the OS2 table.                                               */
1014   /*                                                                       */
1015   /* <Input>                                                               */
1016   /*    face   :: A handle to the target face object.                      */
1017   /*                                                                       */
1018   /*    stream :: A handle to the input stream.                            */
1019   /*                                                                       */
1020   /* <Return>                                                              */
1021   /*    FreeType error code.  0 means success.                             */
1022   /*                                                                       */
1023   FT_LOCAL_DEF( FT_Error )
tt_face_load_os2(TT_Face face,FT_Stream stream)1024   tt_face_load_os2( TT_Face    face,
1025                     FT_Stream  stream )
1026   {
1027     FT_Error  error;
1028     TT_OS2*   os2;
1029 
1030     static const FT_Frame_Field  os2_fields[] =
1031     {
1032 #undef  FT_STRUCTURE
1033 #define FT_STRUCTURE  TT_OS2
1034 
1035       FT_FRAME_START( 78 ),
1036         FT_FRAME_USHORT( version ),
1037         FT_FRAME_SHORT ( xAvgCharWidth ),
1038         FT_FRAME_USHORT( usWeightClass ),
1039         FT_FRAME_USHORT( usWidthClass ),
1040         FT_FRAME_SHORT ( fsType ),
1041         FT_FRAME_SHORT ( ySubscriptXSize ),
1042         FT_FRAME_SHORT ( ySubscriptYSize ),
1043         FT_FRAME_SHORT ( ySubscriptXOffset ),
1044         FT_FRAME_SHORT ( ySubscriptYOffset ),
1045         FT_FRAME_SHORT ( ySuperscriptXSize ),
1046         FT_FRAME_SHORT ( ySuperscriptYSize ),
1047         FT_FRAME_SHORT ( ySuperscriptXOffset ),
1048         FT_FRAME_SHORT ( ySuperscriptYOffset ),
1049         FT_FRAME_SHORT ( yStrikeoutSize ),
1050         FT_FRAME_SHORT ( yStrikeoutPosition ),
1051         FT_FRAME_SHORT ( sFamilyClass ),
1052         FT_FRAME_BYTE  ( panose[0] ),
1053         FT_FRAME_BYTE  ( panose[1] ),
1054         FT_FRAME_BYTE  ( panose[2] ),
1055         FT_FRAME_BYTE  ( panose[3] ),
1056         FT_FRAME_BYTE  ( panose[4] ),
1057         FT_FRAME_BYTE  ( panose[5] ),
1058         FT_FRAME_BYTE  ( panose[6] ),
1059         FT_FRAME_BYTE  ( panose[7] ),
1060         FT_FRAME_BYTE  ( panose[8] ),
1061         FT_FRAME_BYTE  ( panose[9] ),
1062         FT_FRAME_ULONG ( ulUnicodeRange1 ),
1063         FT_FRAME_ULONG ( ulUnicodeRange2 ),
1064         FT_FRAME_ULONG ( ulUnicodeRange3 ),
1065         FT_FRAME_ULONG ( ulUnicodeRange4 ),
1066         FT_FRAME_BYTE  ( achVendID[0] ),
1067         FT_FRAME_BYTE  ( achVendID[1] ),
1068         FT_FRAME_BYTE  ( achVendID[2] ),
1069         FT_FRAME_BYTE  ( achVendID[3] ),
1070 
1071         FT_FRAME_USHORT( fsSelection ),
1072         FT_FRAME_USHORT( usFirstCharIndex ),
1073         FT_FRAME_USHORT( usLastCharIndex ),
1074         FT_FRAME_SHORT ( sTypoAscender ),
1075         FT_FRAME_SHORT ( sTypoDescender ),
1076         FT_FRAME_SHORT ( sTypoLineGap ),
1077         FT_FRAME_USHORT( usWinAscent ),
1078         FT_FRAME_USHORT( usWinDescent ),
1079       FT_FRAME_END
1080     };
1081 
1082     /* `OS/2' version 1 and newer */
1083     static const FT_Frame_Field  os2_fields_extra1[] =
1084     {
1085       FT_FRAME_START( 8 ),
1086         FT_FRAME_ULONG( ulCodePageRange1 ),
1087         FT_FRAME_ULONG( ulCodePageRange2 ),
1088       FT_FRAME_END
1089     };
1090 
1091     /* `OS/2' version 2 and newer */
1092     static const FT_Frame_Field  os2_fields_extra2[] =
1093     {
1094       FT_FRAME_START( 10 ),
1095         FT_FRAME_SHORT ( sxHeight ),
1096         FT_FRAME_SHORT ( sCapHeight ),
1097         FT_FRAME_USHORT( usDefaultChar ),
1098         FT_FRAME_USHORT( usBreakChar ),
1099         FT_FRAME_USHORT( usMaxContext ),
1100       FT_FRAME_END
1101     };
1102 
1103     /* `OS/2' version 5 and newer */
1104     static const FT_Frame_Field  os2_fields_extra5[] =
1105     {
1106       FT_FRAME_START( 4 ),
1107         FT_FRAME_USHORT( usLowerOpticalPointSize ),
1108         FT_FRAME_USHORT( usUpperOpticalPointSize ),
1109       FT_FRAME_END
1110     };
1111 
1112 
1113     /* We now support old Mac fonts where the OS/2 table doesn't  */
1114     /* exist.  Simply put, we set the `version' field to 0xFFFF   */
1115     /* and test this value each time we need to access the table. */
1116     error = face->goto_table( face, TTAG_OS2, stream, 0 );
1117     if ( error )
1118       goto Exit;
1119 
1120     os2 = &face->os2;
1121 
1122     if ( FT_STREAM_READ_FIELDS( os2_fields, os2 ) )
1123       goto Exit;
1124 
1125     os2->ulCodePageRange1        = 0;
1126     os2->ulCodePageRange2        = 0;
1127     os2->sxHeight                = 0;
1128     os2->sCapHeight              = 0;
1129     os2->usDefaultChar           = 0;
1130     os2->usBreakChar             = 0;
1131     os2->usMaxContext            = 0;
1132     os2->usLowerOpticalPointSize = 0;
1133     os2->usUpperOpticalPointSize = 0xFFFF;
1134 
1135     if ( os2->version >= 0x0001 )
1136     {
1137       /* only version 1 tables */
1138       if ( FT_STREAM_READ_FIELDS( os2_fields_extra1, os2 ) )
1139         goto Exit;
1140 
1141       if ( os2->version >= 0x0002 )
1142       {
1143         /* only version 2 tables */
1144         if ( FT_STREAM_READ_FIELDS( os2_fields_extra2, os2 ) )
1145           goto Exit;
1146 
1147         if ( os2->version >= 0x0005 )
1148         {
1149           /* only version 5 tables */
1150           if ( FT_STREAM_READ_FIELDS( os2_fields_extra5, os2 ) )
1151             goto Exit;
1152         }
1153       }
1154     }
1155 
1156     FT_TRACE3(( "sTypoAscender:  %4d\n",   os2->sTypoAscender ));
1157     FT_TRACE3(( "sTypoDescender: %4d\n",   os2->sTypoDescender ));
1158     FT_TRACE3(( "usWinAscent:    %4u\n",   os2->usWinAscent ));
1159     FT_TRACE3(( "usWinDescent:   %4u\n",   os2->usWinDescent ));
1160     FT_TRACE3(( "fsSelection:    0x%2x\n", os2->fsSelection ));
1161 
1162   Exit:
1163     return error;
1164   }
1165 
1166 
1167   /*************************************************************************/
1168   /*                                                                       */
1169   /* <Function>                                                            */
1170   /*    tt_face_load_postscript                                            */
1171   /*                                                                       */
1172   /* <Description>                                                         */
1173   /*    Loads the Postscript table.                                        */
1174   /*                                                                       */
1175   /* <Input>                                                               */
1176   /*    face   :: A handle to the target face object.                      */
1177   /*                                                                       */
1178   /*    stream :: A handle to the input stream.                            */
1179   /*                                                                       */
1180   /* <Return>                                                              */
1181   /*    FreeType error code.  0 means success.                             */
1182   /*                                                                       */
1183   FT_LOCAL_DEF( FT_Error )
tt_face_load_post(TT_Face face,FT_Stream stream)1184   tt_face_load_post( TT_Face    face,
1185                      FT_Stream  stream )
1186   {
1187     FT_Error        error;
1188     TT_Postscript*  post = &face->postscript;
1189 
1190     static const FT_Frame_Field  post_fields[] =
1191     {
1192 #undef  FT_STRUCTURE
1193 #define FT_STRUCTURE  TT_Postscript
1194 
1195       FT_FRAME_START( 32 ),
1196         FT_FRAME_ULONG( FormatType ),
1197         FT_FRAME_ULONG( italicAngle ),
1198         FT_FRAME_SHORT( underlinePosition ),
1199         FT_FRAME_SHORT( underlineThickness ),
1200         FT_FRAME_ULONG( isFixedPitch ),
1201         FT_FRAME_ULONG( minMemType42 ),
1202         FT_FRAME_ULONG( maxMemType42 ),
1203         FT_FRAME_ULONG( minMemType1 ),
1204         FT_FRAME_ULONG( maxMemType1 ),
1205       FT_FRAME_END
1206     };
1207 
1208 
1209     error = face->goto_table( face, TTAG_post, stream, 0 );
1210     if ( error )
1211       return error;
1212 
1213     if ( FT_STREAM_READ_FIELDS( post_fields, post ) )
1214       return error;
1215 
1216     /* we don't load the glyph names, we do that in another */
1217     /* module (ttpost).                                     */
1218 
1219     FT_TRACE3(( "FormatType:   0x%x\n", post->FormatType ));
1220     FT_TRACE3(( "isFixedPitch:   %s\n", post->isFixedPitch
1221                                         ? "  yes" : "   no" ));
1222 
1223     return FT_Err_Ok;
1224   }
1225 
1226 
1227   /*************************************************************************/
1228   /*                                                                       */
1229   /* <Function>                                                            */
1230   /*    tt_face_load_pclt                                                  */
1231   /*                                                                       */
1232   /* <Description>                                                         */
1233   /*    Loads the PCL 5 Table.                                             */
1234   /*                                                                       */
1235   /* <Input>                                                               */
1236   /*    face   :: A handle to the target face object.                      */
1237   /*                                                                       */
1238   /*    stream :: A handle to the input stream.                            */
1239   /*                                                                       */
1240   /* <Return>                                                              */
1241   /*    FreeType error code.  0 means success.                             */
1242   /*                                                                       */
1243   FT_LOCAL_DEF( FT_Error )
tt_face_load_pclt(TT_Face face,FT_Stream stream)1244   tt_face_load_pclt( TT_Face    face,
1245                      FT_Stream  stream )
1246   {
1247     static const FT_Frame_Field  pclt_fields[] =
1248     {
1249 #undef  FT_STRUCTURE
1250 #define FT_STRUCTURE  TT_PCLT
1251 
1252       FT_FRAME_START( 54 ),
1253         FT_FRAME_ULONG ( Version ),
1254         FT_FRAME_ULONG ( FontNumber ),
1255         FT_FRAME_USHORT( Pitch ),
1256         FT_FRAME_USHORT( xHeight ),
1257         FT_FRAME_USHORT( Style ),
1258         FT_FRAME_USHORT( TypeFamily ),
1259         FT_FRAME_USHORT( CapHeight ),
1260         FT_FRAME_USHORT( SymbolSet ),
1261         FT_FRAME_BYTES ( TypeFace, 16 ),
1262         FT_FRAME_BYTES ( CharacterComplement, 8 ),
1263         FT_FRAME_BYTES ( FileName, 6 ),
1264         FT_FRAME_CHAR  ( StrokeWeight ),
1265         FT_FRAME_CHAR  ( WidthType ),
1266         FT_FRAME_BYTE  ( SerifStyle ),
1267         FT_FRAME_BYTE  ( Reserved ),
1268       FT_FRAME_END
1269     };
1270 
1271     FT_Error  error;
1272     TT_PCLT*  pclt = &face->pclt;
1273 
1274 
1275     /* optional table */
1276     error = face->goto_table( face, TTAG_PCLT, stream, 0 );
1277     if ( error )
1278       goto Exit;
1279 
1280     if ( FT_STREAM_READ_FIELDS( pclt_fields, pclt ) )
1281       goto Exit;
1282 
1283   Exit:
1284     return error;
1285   }
1286 
1287 
1288   /*************************************************************************/
1289   /*                                                                       */
1290   /* <Function>                                                            */
1291   /*    tt_face_load_gasp                                                  */
1292   /*                                                                       */
1293   /* <Description>                                                         */
1294   /*    Loads the `gasp' table into a face object.                         */
1295   /*                                                                       */
1296   /* <Input>                                                               */
1297   /*    face   :: A handle to the target face object.                      */
1298   /*                                                                       */
1299   /*    stream :: The input stream.                                        */
1300   /*                                                                       */
1301   /* <Return>                                                              */
1302   /*    FreeType error code.  0 means success.                             */
1303   /*                                                                       */
1304   FT_LOCAL_DEF( FT_Error )
tt_face_load_gasp(TT_Face face,FT_Stream stream)1305   tt_face_load_gasp( TT_Face    face,
1306                      FT_Stream  stream )
1307   {
1308     FT_Error   error;
1309     FT_Memory  memory = stream->memory;
1310 
1311     FT_UInt        j,num_ranges;
1312     TT_GaspRange   gaspranges = NULL;
1313 
1314 
1315     /* the gasp table is optional */
1316     error = face->goto_table( face, TTAG_gasp, stream, 0 );
1317     if ( error )
1318       goto Exit;
1319 
1320     if ( FT_FRAME_ENTER( 4L ) )
1321       goto Exit;
1322 
1323     face->gasp.version   = FT_GET_USHORT();
1324     face->gasp.numRanges = FT_GET_USHORT();
1325 
1326     FT_FRAME_EXIT();
1327 
1328     /* only support versions 0 and 1 of the table */
1329     if ( face->gasp.version >= 2 )
1330     {
1331       face->gasp.numRanges = 0;
1332       error = FT_THROW( Invalid_Table );
1333       goto Exit;
1334     }
1335 
1336     num_ranges = face->gasp.numRanges;
1337     FT_TRACE3(( "numRanges: %u\n", num_ranges ));
1338 
1339     if ( FT_QNEW_ARRAY( face->gasp.gaspRanges, num_ranges ) ||
1340          FT_FRAME_ENTER( num_ranges * 4L )                  )
1341       goto Exit;
1342 
1343     gaspranges = face->gasp.gaspRanges;
1344 
1345     for ( j = 0; j < num_ranges; j++ )
1346     {
1347       gaspranges[j].maxPPEM  = FT_GET_USHORT();
1348       gaspranges[j].gaspFlag = FT_GET_USHORT();
1349 
1350       FT_TRACE3(( "gaspRange %d: rangeMaxPPEM %5d, rangeGaspBehavior 0x%x\n",
1351                   j,
1352                   gaspranges[j].maxPPEM,
1353                   gaspranges[j].gaspFlag ));
1354     }
1355 
1356     FT_FRAME_EXIT();
1357 
1358   Exit:
1359     return error;
1360   }
1361 
1362 
1363 /* END */
1364