Port ebc4912: Prevent overflow while offsets writing.

DEV-1885
itext · Aug 15, 2017 · 9bef56e · 9bef56e
1 parent 04f38fc
commit 9bef56e
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/itext/src/main/java/com/itextpdf/text/pdf/CFFFontSubset.java b/itext/src/main/java/com/itextpdf/text/pdf/CFFFontSubset.java
@@ -1043,9 +1043,9 @@ protected byte[] AssembleIndex(int[] NewOffsets,byte[] NewObjects)
 		int Size = NewOffsets[NewOffsets.length-1];
 		// Calc the Offsize
 		byte Offsize;
-        if (Size <= 0xff) Offsize = 1;
-        else if (Size <= 0xffff) Offsize = 2;
-        else if (Size <= 0xffffff) Offsize = 3;
+        if (Size < 0xff) Offsize = 1;
+        else if (Size < 0xffff) Offsize = 2;
+        else if (Size < 0xffffff) Offsize = 3;
         else Offsize = 4;
         // The byte array for the new index. The size is calc by
         // Count=2, Offsize=1, OffsetArray = Offsize*(Count+1), The object array