1 | /**************************************************************************** |
2 | * |
3 | * gxvprop.c |
4 | * |
5 | * TrueTypeGX/AAT prop table validation (body). |
6 | * |
7 | * Copyright (C) 2004-2023 by |
8 | * suzuki toshiya, Masatake YAMATO, Red Hat K.K., |
9 | * David Turner, Robert Wilhelm, and Werner Lemberg. |
10 | * |
11 | * This file is part of the FreeType project, and may only be used, |
12 | * modified, and distributed under the terms of the FreeType project |
13 | * license, LICENSE.TXT. By continuing to use, modify, or distribute |
14 | * this file you indicate that you have read the license and |
15 | * understand and accept it fully. |
16 | * |
17 | */ |
18 | |
19 | /**************************************************************************** |
20 | * |
21 | * gxvalid is derived from both gxlayout module and otvalid module. |
22 | * Development of gxlayout is supported by the Information-technology |
23 | * Promotion Agency(IPA), Japan. |
24 | * |
25 | */ |
26 | |
27 | |
28 | #include "gxvalid.h" |
29 | #include "gxvcommn.h" |
30 | |
31 | |
32 | /************************************************************************** |
33 | * |
34 | * The macro FT_COMPONENT is used in trace mode. It is an implicit |
35 | * parameter of the FT_TRACE() and FT_ERROR() macros, used to print/log |
36 | * messages during execution. |
37 | */ |
38 | #undef FT_COMPONENT |
39 | #define FT_COMPONENT gxvprop |
40 | |
41 | |
42 | /*************************************************************************/ |
43 | /*************************************************************************/ |
44 | /***** *****/ |
45 | /***** Data and Types *****/ |
46 | /***** *****/ |
47 | /*************************************************************************/ |
48 | /*************************************************************************/ |
49 | |
50 | #define ( 4 + 2 + 2 ) |
51 | #define GXV_PROP_SIZE_MIN GXV_PROP_HEADER_SIZE |
52 | |
53 | typedef struct GXV_prop_DataRec_ |
54 | { |
55 | FT_Fixed version; |
56 | |
57 | } GXV_prop_DataRec, *GXV_prop_Data; |
58 | |
59 | #define GXV_PROP_DATA( field ) GXV_TABLE_DATA( prop, field ) |
60 | |
61 | #define GXV_PROP_FLOATER 0x8000U |
62 | #define GXV_PROP_USE_COMPLEMENTARY_BRACKET 0x1000U |
63 | #define GXV_PROP_COMPLEMENTARY_BRACKET_OFFSET 0x0F00U |
64 | #define GXV_PROP_ATTACHING_TO_RIGHT 0x0080U |
65 | #define GXV_PROP_RESERVED 0x0060U |
66 | #define GXV_PROP_DIRECTIONALITY_CLASS 0x001FU |
67 | |
68 | |
69 | /*************************************************************************/ |
70 | /*************************************************************************/ |
71 | /***** *****/ |
72 | /***** UTILITY FUNCTIONS *****/ |
73 | /***** *****/ |
74 | /*************************************************************************/ |
75 | /*************************************************************************/ |
76 | |
77 | static void |
78 | gxv_prop_zero_advance_validate( FT_UShort gid, |
79 | GXV_Validator gxvalid ) |
80 | { |
81 | FT_Face face; |
82 | FT_Error error; |
83 | FT_GlyphSlot glyph; |
84 | |
85 | |
86 | GXV_NAME_ENTER( "zero advance" ); |
87 | |
88 | face = gxvalid->face; |
89 | |
90 | error = FT_Load_Glyph( face, |
91 | gid, |
92 | FT_LOAD_IGNORE_TRANSFORM ); |
93 | if ( error ) |
94 | FT_INVALID_GLYPH_ID; |
95 | |
96 | glyph = face->glyph; |
97 | |
98 | if ( glyph->advance.x != (FT_Pos)0 || |
99 | glyph->advance.y != (FT_Pos)0 ) |
100 | { |
101 | GXV_TRACE(( " found non-zero advance in zero-advance glyph\n" )); |
102 | FT_INVALID_DATA; |
103 | } |
104 | |
105 | GXV_EXIT; |
106 | } |
107 | |
108 | |
109 | /* Pass 0 as GLYPH to check the default property */ |
110 | static void |
111 | gxv_prop_property_validate( FT_UShort property, |
112 | FT_UShort glyph, |
113 | GXV_Validator gxvalid ) |
114 | { |
115 | if ( glyph != 0 && ( property & GXV_PROP_FLOATER ) ) |
116 | gxv_prop_zero_advance_validate( glyph, gxvalid ); |
117 | |
118 | if ( property & GXV_PROP_USE_COMPLEMENTARY_BRACKET ) |
119 | { |
120 | FT_UShort offset; |
121 | char complement; |
122 | |
123 | |
124 | offset = (FT_UShort)( property & GXV_PROP_COMPLEMENTARY_BRACKET_OFFSET ); |
125 | if ( offset == 0 ) |
126 | { |
127 | GXV_TRACE(( " found zero offset to property\n" )); |
128 | FT_INVALID_OFFSET; |
129 | } |
130 | |
131 | complement = (char)( offset >> 8 ); |
132 | if ( complement & 0x08 ) |
133 | { |
134 | /* Top bit is set: negative */ |
135 | |
136 | /* Calculate the absolute offset */ |
137 | complement = (char)( ( complement & 0x07 ) + 1 ); |
138 | |
139 | /* The gid for complement must be greater than 0 */ |
140 | if ( glyph <= complement ) |
141 | { |
142 | GXV_TRACE(( " found non-positive glyph complement\n" )); |
143 | FT_INVALID_DATA; |
144 | } |
145 | } |
146 | else |
147 | { |
148 | /* The gid for complement must be the face. */ |
149 | gxv_glyphid_validate( (FT_UShort)( glyph + complement ), gxvalid ); |
150 | } |
151 | } |
152 | else |
153 | { |
154 | if ( property & GXV_PROP_COMPLEMENTARY_BRACKET_OFFSET ) |
155 | GXV_TRACE(( "glyph %d cannot have complementary bracketing\n" , |
156 | glyph )); |
157 | } |
158 | |
159 | /* this is introduced in version 2.0 */ |
160 | if ( property & GXV_PROP_ATTACHING_TO_RIGHT ) |
161 | { |
162 | if ( GXV_PROP_DATA( version ) == 0x00010000UL ) |
163 | { |
164 | GXV_TRACE(( " found older version (1.0) in new version table\n" )); |
165 | FT_INVALID_DATA; |
166 | } |
167 | } |
168 | |
169 | if ( property & GXV_PROP_RESERVED ) |
170 | { |
171 | GXV_TRACE(( " found non-zero bits in reserved bits\n" )); |
172 | FT_INVALID_DATA; |
173 | } |
174 | |
175 | if ( ( property & GXV_PROP_DIRECTIONALITY_CLASS ) > 11 ) |
176 | { |
177 | /* TODO: Too restricted. Use the validation level. */ |
178 | if ( GXV_PROP_DATA( version ) == 0x00010000UL || |
179 | GXV_PROP_DATA( version ) == 0x00020000UL ) |
180 | { |
181 | GXV_TRACE(( " found too old version in directionality class\n" )); |
182 | FT_INVALID_DATA; |
183 | } |
184 | } |
185 | } |
186 | |
187 | |
188 | static void |
189 | gxv_prop_LookupValue_validate( FT_UShort glyph, |
190 | GXV_LookupValueCPtr value_p, |
191 | GXV_Validator gxvalid ) |
192 | { |
193 | gxv_prop_property_validate( value_p->u, glyph, gxvalid ); |
194 | } |
195 | |
196 | |
197 | /* |
198 | +===============+ --------+ |
199 | | lookup header | | |
200 | +===============+ | |
201 | | BinSrchHeader | | |
202 | +===============+ | |
203 | | lastGlyph[0] | | |
204 | +---------------+ | |
205 | | firstGlyph[0] | | head of lookup table |
206 | +---------------+ | + |
207 | | offset[0] | -> | offset [byte] |
208 | +===============+ | + |
209 | | lastGlyph[1] | | (glyphID - firstGlyph) * 2 [byte] |
210 | +---------------+ | |
211 | | firstGlyph[1] | | |
212 | +---------------+ | |
213 | | offset[1] | | |
214 | +===============+ | |
215 | | |
216 | ... | |
217 | | |
218 | 16bit value array | |
219 | +===============+ | |
220 | | value | <-------+ |
221 | ... |
222 | */ |
223 | |
224 | static GXV_LookupValueDesc |
225 | gxv_prop_LookupFmt4_transit( FT_UShort relative_gindex, |
226 | GXV_LookupValueCPtr base_value_p, |
227 | FT_Bytes lookuptbl_limit, |
228 | GXV_Validator gxvalid ) |
229 | { |
230 | FT_Bytes p; |
231 | FT_Bytes limit; |
232 | FT_UShort offset; |
233 | GXV_LookupValueDesc value; |
234 | |
235 | /* XXX: check range? */ |
236 | offset = (FT_UShort)( base_value_p->u + |
237 | relative_gindex * sizeof ( FT_UShort ) ); |
238 | p = gxvalid->lookuptbl_head + offset; |
239 | limit = lookuptbl_limit; |
240 | |
241 | GXV_LIMIT_CHECK ( 2 ); |
242 | value.u = FT_NEXT_USHORT( p ); |
243 | |
244 | return value; |
245 | } |
246 | |
247 | |
248 | /*************************************************************************/ |
249 | /*************************************************************************/ |
250 | /***** *****/ |
251 | /***** prop TABLE *****/ |
252 | /***** *****/ |
253 | /*************************************************************************/ |
254 | /*************************************************************************/ |
255 | |
256 | FT_LOCAL_DEF( void ) |
257 | gxv_prop_validate( FT_Bytes table, |
258 | FT_Face face, |
259 | FT_Validator ftvalid ) |
260 | { |
261 | FT_Bytes p = table; |
262 | FT_Bytes limit = 0; |
263 | GXV_ValidatorRec gxvalidrec; |
264 | GXV_Validator gxvalid = &gxvalidrec; |
265 | |
266 | GXV_prop_DataRec proprec; |
267 | GXV_prop_Data prop = &proprec; |
268 | |
269 | FT_Fixed version; |
270 | FT_UShort format; |
271 | FT_UShort defaultProp; |
272 | |
273 | |
274 | gxvalid->root = ftvalid; |
275 | gxvalid->table_data = prop; |
276 | gxvalid->face = face; |
277 | |
278 | FT_TRACE3(( "validating `prop' table\n" )); |
279 | GXV_INIT; |
280 | |
281 | GXV_LIMIT_CHECK( 4 + 2 + 2 ); |
282 | version = FT_NEXT_LONG( p ); |
283 | format = FT_NEXT_USHORT( p ); |
284 | defaultProp = FT_NEXT_USHORT( p ); |
285 | |
286 | GXV_TRACE(( " version 0x%08lx\n" , version )); |
287 | GXV_TRACE(( " format 0x%04x\n" , format )); |
288 | GXV_TRACE(( " defaultProp 0x%04x\n" , defaultProp )); |
289 | |
290 | /* only versions 1.0, 2.0, 3.0 are defined (1996) */ |
291 | if ( version != 0x00010000UL && |
292 | version != 0x00020000UL && |
293 | version != 0x00030000UL ) |
294 | { |
295 | GXV_TRACE(( " found unknown version\n" )); |
296 | FT_INVALID_FORMAT; |
297 | } |
298 | |
299 | |
300 | /* only formats 0x0000, 0x0001 are defined (1996) */ |
301 | if ( format > 1 ) |
302 | { |
303 | GXV_TRACE(( " found unknown format\n" )); |
304 | FT_INVALID_FORMAT; |
305 | } |
306 | |
307 | gxv_prop_property_validate( defaultProp, 0, gxvalid ); |
308 | |
309 | if ( format == 0 ) |
310 | { |
311 | FT_TRACE3(( "(format 0, no per-glyph properties, " |
312 | "remaining %ld bytes are skipped)" , limit - p )); |
313 | goto Exit; |
314 | } |
315 | |
316 | /* format == 1 */ |
317 | GXV_PROP_DATA( version ) = version; |
318 | |
319 | gxvalid->lookupval_sign = GXV_LOOKUPVALUE_UNSIGNED; |
320 | gxvalid->lookupval_func = gxv_prop_LookupValue_validate; |
321 | gxvalid->lookupfmt4_trans = gxv_prop_LookupFmt4_transit; |
322 | |
323 | gxv_LookupTable_validate( p, limit, gxvalid ); |
324 | |
325 | Exit: |
326 | FT_TRACE4(( "\n" )); |
327 | } |
328 | |
329 | |
330 | /* END */ |
331 | |