oob

luanti-org · Jan 10, 2025 · 2ca2552 · 2ca2552
1 parent 8b067fa
commit 2ca2552
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/client/fontengine.cpp b/src/client/fontengine.cpp
@@ -195,7 +195,8 @@ void FontEngine::setMediaFont(const std::string &name, const std::string &data)
 	}
 
 	constexpr char TTF_MAGIC[5] = {0, 1, 0, 0, 0};
-	if (memcmp(data.data(), "wOF2", 4) && memcmp(data.data(), TTF_MAGIC, 5)) {
+	if (data.size() < 5 || (memcmp(data.data(), "wOF2", 4) &&
+			memcmp(data.data(), TTF_MAGIC, 5))) {
 		warningstream << "Rejecting media font with unrecognized magic" << std::endl;
 		return;
 	}