1/***************************************************************************/
2/*                                                                         */
3/*  t42parse.c                                                             */
4/*                                                                         */
5/*    Type 42 font parser (body).                                          */
6/*                                                                         */
7/*  Copyright 2002-2018 by                                                 */
8/*  Roberto Alameda.                                                       */
9/*                                                                         */
10/*  This file is part of the FreeType project, and may only be used,       */
11/*  modified, and distributed under the terms of the FreeType project      */
12/*  license, LICENSE.TXT.  By continuing to use, modify, or distribute     */
13/*  this file you indicate that you have read the license and              */
14/*  understand and accept it fully.                                        */
15/*                                                                         */
16/***************************************************************************/
17
18
19#include "t42parse.h"
20#include "t42error.h"
21#include FT_INTERNAL_DEBUG_H
22#include FT_INTERNAL_STREAM_H
23#include FT_INTERNAL_POSTSCRIPT_AUX_H
24
25
26  /*************************************************************************/
27  /*                                                                       */
28  /* The macro FT_COMPONENT is used in trace mode.  It is an implicit      */
29  /* parameter of the FT_TRACE() and FT_ERROR() macros, used to print/log  */
30  /* messages during execution.                                            */
31  /*                                                                       */
32#undef  FT_COMPONENT
33#define FT_COMPONENT  trace_t42
34
35
36  static void
37  t42_parse_font_matrix( T42_Face    face,
38                         T42_Loader  loader );
39  static void
40  t42_parse_encoding( T42_Face    face,
41                      T42_Loader  loader );
42
43  static void
44  t42_parse_charstrings( T42_Face    face,
45                         T42_Loader  loader );
46
47  static void
48  t42_parse_sfnts( T42_Face    face,
49                   T42_Loader  loader );
50
51
52  /* as Type42 fonts have no Private dict,         */
53  /* we set the last argument of T1_FIELD_XXX to 0 */
54  static const
55  T1_FieldRec  t42_keywords[] =
56  {
57
58#undef  FT_STRUCTURE
59#define FT_STRUCTURE  T1_FontInfo
60#undef  T1CODE
61#define T1CODE        T1_FIELD_LOCATION_FONT_INFO
62
63    T1_FIELD_STRING( "version",            version,             0 )
64    T1_FIELD_STRING( "Notice",             notice,              0 )
65    T1_FIELD_STRING( "FullName",           full_name,           0 )
66    T1_FIELD_STRING( "FamilyName",         family_name,         0 )
67    T1_FIELD_STRING( "Weight",             weight,              0 )
68    T1_FIELD_NUM   ( "ItalicAngle",        italic_angle,        0 )
69    T1_FIELD_BOOL  ( "isFixedPitch",       is_fixed_pitch,      0 )
70    T1_FIELD_NUM   ( "UnderlinePosition",  underline_position,  0 )
71    T1_FIELD_NUM   ( "UnderlineThickness", underline_thickness, 0 )
72
73#undef  FT_STRUCTURE
74#define FT_STRUCTURE  PS_FontExtraRec
75#undef  T1CODE
76#define T1CODE        T1_FIELD_LOCATION_FONT_EXTRA
77
78    T1_FIELD_NUM   ( "FSType",             fs_type,             0 )
79
80#undef  FT_STRUCTURE
81#define FT_STRUCTURE  T1_FontRec
82#undef  T1CODE
83#define T1CODE        T1_FIELD_LOCATION_FONT_DICT
84
85    T1_FIELD_KEY  ( "FontName",    font_name,    0 )
86    T1_FIELD_NUM  ( "PaintType",   paint_type,   0 )
87    T1_FIELD_NUM  ( "FontType",    font_type,    0 )
88    T1_FIELD_FIXED( "StrokeWidth", stroke_width, 0 )
89
90#undef  FT_STRUCTURE
91#define FT_STRUCTURE  FT_BBox
92#undef  T1CODE
93#define T1CODE        T1_FIELD_LOCATION_BBOX
94
95    T1_FIELD_BBOX("FontBBox", xMin, 0 )
96
97    T1_FIELD_CALLBACK( "FontMatrix",  t42_parse_font_matrix, 0 )
98    T1_FIELD_CALLBACK( "Encoding",    t42_parse_encoding,    0 )
99    T1_FIELD_CALLBACK( "CharStrings", t42_parse_charstrings, 0 )
100    T1_FIELD_CALLBACK( "sfnts",       t42_parse_sfnts,       0 )
101
102    { 0, T1_FIELD_LOCATION_CID_INFO, T1_FIELD_TYPE_NONE, 0, 0, 0, 0, 0, 0 }
103  };
104
105
106#define T1_Add_Table( p, i, o, l )  (p)->funcs.add( (p), i, o, l )
107#define T1_Release_Table( p )          \
108          do                           \
109          {                            \
110            if ( (p)->funcs.release )  \
111              (p)->funcs.release( p ); \
112          } while ( 0 )
113
114#define T1_Skip_Spaces( p )    (p)->root.funcs.skip_spaces( &(p)->root )
115#define T1_Skip_PS_Token( p )  (p)->root.funcs.skip_PS_token( &(p)->root )
116
117#define T1_ToInt( p )                          \
118          (p)->root.funcs.to_int( &(p)->root )
119#define T1_ToBytes( p, b, m, n, d )                          \
120          (p)->root.funcs.to_bytes( &(p)->root, b, m, n, d )
121
122#define T1_ToFixedArray( p, m, f, t )                           \
123          (p)->root.funcs.to_fixed_array( &(p)->root, m, f, t )
124#define T1_ToToken( p, t )                          \
125          (p)->root.funcs.to_token( &(p)->root, t )
126
127#define T1_Load_Field( p, f, o, m, pf )                         \
128          (p)->root.funcs.load_field( &(p)->root, f, o, m, pf )
129#define T1_Load_Field_Table( p, f, o, m, pf )                         \
130          (p)->root.funcs.load_field_table( &(p)->root, f, o, m, pf )
131
132
133  /********************* Parsing Functions ******************/
134
135  FT_LOCAL_DEF( FT_Error )
136  t42_parser_init( T42_Parser     parser,
137                   FT_Stream      stream,
138                   FT_Memory      memory,
139                   PSAux_Service  psaux )
140  {
141    FT_Error  error = FT_Err_Ok;
142    FT_Long   size;
143
144
145    psaux->ps_parser_funcs->init( &parser->root, NULL, NULL, memory );
146
147    parser->stream    = stream;
148    parser->base_len  = 0;
149    parser->base_dict = NULL;
150    parser->in_memory = 0;
151
152    /*******************************************************************/
153    /*                                                                 */
154    /* Here a short summary of what is going on:                       */
155    /*                                                                 */
156    /*   When creating a new Type 42 parser, we try to locate and load */
157    /*   the base dictionary, loading the whole font into memory.      */
158    /*                                                                 */
159    /*   When `loading' the base dictionary, we only set up pointers   */
160    /*   in the case of a memory-based stream.  Otherwise, we allocate */
161    /*   and load the base dictionary in it.                           */
162    /*                                                                 */
163    /*   parser->in_memory is set if we have a memory stream.          */
164    /*                                                                 */
165
166    if ( FT_STREAM_SEEK( 0L ) ||
167         FT_FRAME_ENTER( 17 ) )
168      goto Exit;
169
170    if ( ft_memcmp( stream->cursor, "%!PS-TrueTypeFont", 17 ) != 0 )
171    {
172      FT_TRACE2(( "  not a Type42 font\n" ));
173      error = FT_THROW( Unknown_File_Format );
174    }
175
176    FT_FRAME_EXIT();
177
178    if ( error || FT_STREAM_SEEK( 0 ) )
179      goto Exit;
180
181    size = (FT_Long)stream->size;
182
183    /* now, try to load `size' bytes of the `base' dictionary we */
184    /* found previously                                          */
185
186    /* if it is a memory-based resource, set up pointers */
187    if ( !stream->read )
188    {
189      parser->base_dict = (FT_Byte*)stream->base + stream->pos;
190      parser->base_len  = size;
191      parser->in_memory = 1;
192
193      /* check that the `size' field is valid */
194      if ( FT_STREAM_SKIP( size ) )
195        goto Exit;
196    }
197    else
198    {
199      /* read segment in memory */
200      if ( FT_ALLOC( parser->base_dict, size )       ||
201           FT_STREAM_READ( parser->base_dict, size ) )
202        goto Exit;
203
204      parser->base_len = size;
205    }
206
207    parser->root.base   = parser->base_dict;
208    parser->root.cursor = parser->base_dict;
209    parser->root.limit  = parser->root.cursor + parser->base_len;
210
211  Exit:
212    if ( error && !parser->in_memory )
213      FT_FREE( parser->base_dict );
214
215    return error;
216  }
217
218
219  FT_LOCAL_DEF( void )
220  t42_parser_done( T42_Parser  parser )
221  {
222    FT_Memory  memory = parser->root.memory;
223
224
225    /* free the base dictionary only when we have a disk stream */
226    if ( !parser->in_memory )
227      FT_FREE( parser->base_dict );
228
229    parser->root.funcs.done( &parser->root );
230  }
231
232
233  static int
234  t42_is_space( FT_Byte  c )
235  {
236    return ( c == ' '  || c == '\t'              ||
237             c == '\r' || c == '\n' || c == '\f' ||
238             c == '\0'                           );
239  }
240
241
242  static void
243  t42_parse_font_matrix( T42_Face    face,
244                         T42_Loader  loader )
245  {
246    T42_Parser  parser = &loader->parser;
247    FT_Matrix*  matrix = &face->type1.font_matrix;
248    FT_Vector*  offset = &face->type1.font_offset;
249    FT_Fixed    temp[6];
250    FT_Fixed    temp_scale;
251    FT_Int      result;
252
253
254    result = T1_ToFixedArray( parser, 6, temp, 0 );
255
256    if ( result < 6 )
257    {
258      parser->root.error = FT_THROW( Invalid_File_Format );
259      return;
260    }
261
262    temp_scale = FT_ABS( temp[3] );
263
264    if ( temp_scale == 0 )
265    {
266      FT_ERROR(( "t42_parse_font_matrix: invalid font matrix\n" ));
267      parser->root.error = FT_THROW( Invalid_File_Format );
268      return;
269    }
270
271    /* atypical case */
272    if ( temp_scale != 0x10000L )
273    {
274      temp[0] = FT_DivFix( temp[0], temp_scale );
275      temp[1] = FT_DivFix( temp[1], temp_scale );
276      temp[2] = FT_DivFix( temp[2], temp_scale );
277      temp[4] = FT_DivFix( temp[4], temp_scale );
278      temp[5] = FT_DivFix( temp[5], temp_scale );
279      temp[3] = temp[3] < 0 ? -0x10000L : 0x10000L;
280    }
281
282    matrix->xx = temp[0];
283    matrix->yx = temp[1];
284    matrix->xy = temp[2];
285    matrix->yy = temp[3];
286
287    /* note that the offsets must be expressed in integer font units */
288    offset->x = temp[4] >> 16;
289    offset->y = temp[5] >> 16;
290  }
291
292
293  static void
294  t42_parse_encoding( T42_Face    face,
295                      T42_Loader  loader )
296  {
297    T42_Parser  parser = &loader->parser;
298    FT_Byte*    cur;
299    FT_Byte*    limit  = parser->root.limit;
300
301    PSAux_Service  psaux  = (PSAux_Service)face->psaux;
302
303
304    T1_Skip_Spaces( parser );
305    cur = parser->root.cursor;
306    if ( cur >= limit )
307    {
308      FT_ERROR(( "t42_parse_encoding: out of bounds\n" ));
309      parser->root.error = FT_THROW( Invalid_File_Format );
310      return;
311    }
312
313    /* if we have a number or `[', the encoding is an array, */
314    /* and we must load it now                               */
315    if ( ft_isdigit( *cur ) || *cur == '[' )
316    {
317      T1_Encoding  encode          = &face->type1.encoding;
318      FT_Int       count, n;
319      PS_Table     char_table      = &loader->encoding_table;
320      FT_Memory    memory          = parser->root.memory;
321      FT_Error     error;
322      FT_Bool      only_immediates = 0;
323
324
325      /* read the number of entries in the encoding; should be 256 */
326      if ( *cur == '[' )
327      {
328        count           = 256;
329        only_immediates = 1;
330        parser->root.cursor++;
331      }
332      else
333        count = (FT_Int)T1_ToInt( parser );
334
335      /* only composite fonts (which we don't support) */
336      /* can have larger values                        */
337      if ( count > 256 )
338      {
339        FT_ERROR(( "t42_parse_encoding: invalid encoding array size\n" ));
340        parser->root.error = FT_THROW( Invalid_File_Format );
341        return;
342      }
343
344      T1_Skip_Spaces( parser );
345      if ( parser->root.cursor >= limit )
346        return;
347
348      /* PostScript happily allows overwriting of encoding arrays */
349      if ( encode->char_index )
350      {
351        FT_FREE( encode->char_index );
352        FT_FREE( encode->char_name );
353        T1_Release_Table( char_table );
354      }
355
356      /* we use a T1_Table to store our charnames */
357      loader->num_chars = encode->num_chars = count;
358      if ( FT_NEW_ARRAY( encode->char_index, count )     ||
359           FT_NEW_ARRAY( encode->char_name,  count )     ||
360           FT_SET_ERROR( psaux->ps_table_funcs->init(
361                           char_table, count, memory ) ) )
362      {
363        parser->root.error = error;
364        return;
365      }
366
367      /* We need to `zero' out encoding_table.elements */
368      for ( n = 0; n < count; n++ )
369      {
370        char*  notdef = (char *)".notdef";
371
372
373        (void)T1_Add_Table( char_table, n, notdef, 8 );
374      }
375
376      /* Now we need to read records of the form                */
377      /*                                                        */
378      /*   ... charcode /charname ...                           */
379      /*                                                        */
380      /* for each entry in our table.                           */
381      /*                                                        */
382      /* We simply look for a number followed by an immediate   */
383      /* name.  Note that this ignores correctly the sequence   */
384      /* that is often seen in type42 fonts:                    */
385      /*                                                        */
386      /*   0 1 255 { 1 index exch /.notdef put } for dup        */
387      /*                                                        */
388      /* used to clean the encoding array before anything else. */
389      /*                                                        */
390      /* Alternatively, if the array is directly given as       */
391      /*                                                        */
392      /*   /Encoding [ ... ]                                    */
393      /*                                                        */
394      /* we only read immediates.                               */
395
396      n = 0;
397      T1_Skip_Spaces( parser );
398
399      while ( parser->root.cursor < limit )
400      {
401        cur = parser->root.cursor;
402
403        /* we stop when we encounter `def' or `]' */
404        if ( *cur == 'd' && cur + 3 < limit )
405        {
406          if ( cur[1] == 'e'          &&
407               cur[2] == 'f'          &&
408               t42_is_space( cur[3] ) )
409          {
410            FT_TRACE6(( "encoding end\n" ));
411            cur += 3;
412            break;
413          }
414        }
415        if ( *cur == ']' )
416        {
417          FT_TRACE6(( "encoding end\n" ));
418          cur++;
419          break;
420        }
421
422        /* check whether we have found an entry */
423        if ( ft_isdigit( *cur ) || only_immediates )
424        {
425          FT_Int  charcode;
426
427
428          if ( only_immediates )
429            charcode = n;
430          else
431          {
432            charcode = (FT_Int)T1_ToInt( parser );
433            T1_Skip_Spaces( parser );
434
435            /* protect against invalid charcode */
436            if ( cur == parser->root.cursor )
437            {
438              parser->root.error = FT_THROW( Unknown_File_Format );
439              return;
440            }
441          }
442
443          cur = parser->root.cursor;
444
445          if ( cur + 2 < limit && *cur == '/' && n < count )
446          {
447            FT_UInt  len;
448
449
450            cur++;
451
452            parser->root.cursor = cur;
453            T1_Skip_PS_Token( parser );
454            if ( parser->root.cursor >= limit )
455              return;
456            if ( parser->root.error )
457              return;
458
459            len = (FT_UInt)( parser->root.cursor - cur );
460
461            parser->root.error = T1_Add_Table( char_table, charcode,
462                                               cur, len + 1 );
463            if ( parser->root.error )
464              return;
465            char_table->elements[charcode][len] = '\0';
466
467            n++;
468          }
469          else if ( only_immediates )
470          {
471            /* Since the current position is not updated for           */
472            /* immediates-only mode we would get an infinite loop if   */
473            /* we don't do anything here.                              */
474            /*                                                         */
475            /* This encoding array is not valid according to the       */
476            /* type42 specification (it might be an encoding for a CID */
477            /* type42 font, however), so we conclude that this font is */
478            /* NOT a type42 font.                                      */
479            parser->root.error = FT_THROW( Unknown_File_Format );
480            return;
481          }
482        }
483        else
484        {
485          T1_Skip_PS_Token( parser );
486          if ( parser->root.error )
487            return;
488        }
489
490        T1_Skip_Spaces( parser );
491      }
492
493      face->type1.encoding_type = T1_ENCODING_TYPE_ARRAY;
494      parser->root.cursor       = cur;
495    }
496
497    /* Otherwise, we should have either `StandardEncoding', */
498    /* `ExpertEncoding', or `ISOLatin1Encoding'             */
499    else
500    {
501      if ( cur + 17 < limit                                            &&
502           ft_strncmp( (const char*)cur, "StandardEncoding", 16 ) == 0 )
503        face->type1.encoding_type = T1_ENCODING_TYPE_STANDARD;
504
505      else if ( cur + 15 < limit                                          &&
506                ft_strncmp( (const char*)cur, "ExpertEncoding", 14 ) == 0 )
507        face->type1.encoding_type = T1_ENCODING_TYPE_EXPERT;
508
509      else if ( cur + 18 < limit                                             &&
510                ft_strncmp( (const char*)cur, "ISOLatin1Encoding", 17 ) == 0 )
511        face->type1.encoding_type = T1_ENCODING_TYPE_ISOLATIN1;
512
513      else
514        parser->root.error = FT_ERR( Ignore );
515    }
516  }
517
518
519  typedef enum  T42_Load_Status_
520  {
521    BEFORE_START,
522    BEFORE_TABLE_DIR,
523    OTHER_TABLES
524
525  } T42_Load_Status;
526
527
528  static void
529  t42_parse_sfnts( T42_Face    face,
530                   T42_Loader  loader )
531  {
532    T42_Parser  parser = &loader->parser;
533    FT_Memory   memory = parser->root.memory;
534    FT_Byte*    cur;
535    FT_Byte*    limit  = parser->root.limit;
536    FT_Error    error;
537    FT_Int      num_tables = 0;
538    FT_Long     count;
539
540    FT_ULong    n, string_size, old_string_size, real_size;
541    FT_Byte*    string_buf = NULL;
542    FT_Bool     allocated  = 0;
543
544    T42_Load_Status  status;
545
546
547    /* The format is                                */
548    /*                                              */
549    /*   /sfnts [ <hexstring> <hexstring> ... ] def */
550    /*                                              */
551    /* or                                           */
552    /*                                              */
553    /*   /sfnts [                                   */
554    /*      <num_bin_bytes> RD <binary data>        */
555    /*      <num_bin_bytes> RD <binary data>        */
556    /*      ...                                     */
557    /*   ] def                                      */
558    /*                                              */
559    /* with exactly one space after the `RD' token. */
560
561    T1_Skip_Spaces( parser );
562
563    if ( parser->root.cursor >= limit || *parser->root.cursor++ != '[' )
564    {
565      FT_ERROR(( "t42_parse_sfnts: can't find begin of sfnts vector\n" ));
566      error = FT_THROW( Invalid_File_Format );
567      goto Fail;
568    }
569
570    T1_Skip_Spaces( parser );
571    status          = BEFORE_START;
572    string_size     = 0;
573    old_string_size = 0;
574    count           = 0;
575
576    while ( parser->root.cursor < limit )
577    {
578      FT_ULong  size;
579
580
581      cur = parser->root.cursor;
582
583      if ( *cur == ']' )
584      {
585        parser->root.cursor++;
586        goto Exit;
587      }
588
589      else if ( *cur == '<' )
590      {
591        T1_Skip_PS_Token( parser );
592        if ( parser->root.error )
593          goto Exit;
594
595        /* don't include delimiters */
596        string_size = (FT_ULong)( ( parser->root.cursor - cur - 2 + 1 ) / 2 );
597        if ( !string_size )
598        {
599          FT_ERROR(( "t42_parse_sfnts: invalid data in sfnts array\n" ));
600          error = FT_THROW( Invalid_File_Format );
601          goto Fail;
602        }
603        if ( FT_REALLOC( string_buf, old_string_size, string_size ) )
604          goto Fail;
605
606        allocated = 1;
607
608        parser->root.cursor = cur;
609        (void)T1_ToBytes( parser, string_buf, string_size, &real_size, 1 );
610        old_string_size = string_size;
611        string_size     = real_size;
612      }
613
614      else if ( ft_isdigit( *cur ) )
615      {
616        FT_Long  tmp;
617
618
619        if ( allocated )
620        {
621          FT_ERROR(( "t42_parse_sfnts: "
622                     "can't handle mixed binary and hex strings\n" ));
623          error = FT_THROW( Invalid_File_Format );
624          goto Fail;
625        }
626
627        tmp = T1_ToInt( parser );
628        if ( tmp < 0 )
629        {
630          FT_ERROR(( "t42_parse_sfnts: invalid string size\n" ));
631          error = FT_THROW( Invalid_File_Format );
632          goto Fail;
633        }
634        else
635          string_size = (FT_ULong)tmp;
636
637        T1_Skip_PS_Token( parser );             /* `RD' */
638        if ( parser->root.error )
639          return;
640
641        string_buf = parser->root.cursor + 1;   /* one space after `RD' */
642
643        if ( (FT_ULong)( limit - parser->root.cursor ) <= string_size )
644        {
645          FT_ERROR(( "t42_parse_sfnts: too much binary data\n" ));
646          error = FT_THROW( Invalid_File_Format );
647          goto Fail;
648        }
649        else
650          parser->root.cursor += string_size + 1;
651      }
652
653      if ( !string_buf )
654      {
655        FT_ERROR(( "t42_parse_sfnts: invalid data in sfnts array\n" ));
656        error = FT_THROW( Invalid_File_Format );
657        goto Fail;
658      }
659
660      /* A string can have a trailing zero (odd) byte for padding. */
661      /* Ignore it.                                                */
662      if ( ( string_size & 1 ) && string_buf[string_size - 1] == 0 )
663        string_size--;
664
665      if ( !string_size )
666      {
667        FT_ERROR(( "t42_parse_sfnts: invalid string\n" ));
668        error = FT_THROW( Invalid_File_Format );
669        goto Fail;
670      }
671
672      /* The whole TTF is now loaded into `string_buf'.  We are */
673      /* checking its contents while copying it to `ttf_data'.  */
674
675      size = (FT_ULong)( limit - parser->root.cursor );
676
677      for ( n = 0; n < string_size; n++ )
678      {
679        switch ( status )
680        {
681        case BEFORE_START:
682          /* load offset table, 12 bytes */
683          if ( count < 12 )
684          {
685            face->ttf_data[count++] = string_buf[n];
686            continue;
687          }
688          else
689          {
690            num_tables     = 16 * face->ttf_data[4] + face->ttf_data[5];
691            status         = BEFORE_TABLE_DIR;
692            face->ttf_size = 12 + 16 * num_tables;
693
694            if ( (FT_Long)size < face->ttf_size )
695            {
696              FT_ERROR(( "t42_parse_sfnts: invalid data in sfnts array\n" ));
697              error = FT_THROW( Invalid_File_Format );
698              goto Fail;
699            }
700
701            if ( FT_REALLOC( face->ttf_data, 12, face->ttf_size ) )
702              goto Fail;
703          }
704          /* fall through */
705
706        case BEFORE_TABLE_DIR:
707          /* the offset table is read; read the table directory */
708          if ( count < face->ttf_size )
709          {
710            face->ttf_data[count++] = string_buf[n];
711            continue;
712          }
713          else
714          {
715            int       i;
716            FT_ULong  len;
717
718
719            for ( i = 0; i < num_tables; i++ )
720            {
721              FT_Byte*  p = face->ttf_data + 12 + 16 * i + 12;
722
723
724              len = FT_PEEK_ULONG( p );
725              if ( len > size                               ||
726                   face->ttf_size > (FT_Long)( size - len ) )
727              {
728                FT_ERROR(( "t42_parse_sfnts:"
729                           " invalid data in sfnts array\n" ));
730                error = FT_THROW( Invalid_File_Format );
731                goto Fail;
732              }
733
734              /* Pad to a 4-byte boundary length */
735              face->ttf_size += (FT_Long)( ( len + 3 ) & ~3U );
736            }
737
738            status = OTHER_TABLES;
739
740            if ( FT_REALLOC( face->ttf_data, 12 + 16 * num_tables,
741                             face->ttf_size + 1 ) )
742              goto Fail;
743          }
744          /* fall through */
745
746        case OTHER_TABLES:
747          /* all other tables are just copied */
748          if ( count >= face->ttf_size )
749          {
750            FT_ERROR(( "t42_parse_sfnts: too much binary data\n" ));
751            error = FT_THROW( Invalid_File_Format );
752            goto Fail;
753          }
754          face->ttf_data[count++] = string_buf[n];
755        }
756      }
757
758      T1_Skip_Spaces( parser );
759    }
760
761    /* if control reaches this point, the format was not valid */
762    error = FT_THROW( Invalid_File_Format );
763
764  Fail:
765    parser->root.error = error;
766
767  Exit:
768    if ( allocated )
769      FT_FREE( string_buf );
770  }
771
772
773  static void
774  t42_parse_charstrings( T42_Face    face,
775                         T42_Loader  loader )
776  {
777    T42_Parser     parser       = &loader->parser;
778    PS_Table       code_table   = &loader->charstrings;
779    PS_Table       name_table   = &loader->glyph_names;
780    PS_Table       swap_table   = &loader->swap_table;
781    FT_Memory      memory       = parser->root.memory;
782    FT_Error       error;
783
784    PSAux_Service  psaux        = (PSAux_Service)face->psaux;
785
786    FT_Byte*       cur;
787    FT_Byte*       limit        = parser->root.limit;
788    FT_Int         n;
789    FT_Int         notdef_index = 0;
790    FT_Byte        notdef_found = 0;
791
792
793    T1_Skip_Spaces( parser );
794
795    if ( parser->root.cursor >= limit )
796    {
797      FT_ERROR(( "t42_parse_charstrings: out of bounds\n" ));
798      error = FT_THROW( Invalid_File_Format );
799      goto Fail;
800    }
801
802    if ( ft_isdigit( *parser->root.cursor ) )
803    {
804      loader->num_glyphs = T1_ToInt( parser );
805      if ( parser->root.error )
806        return;
807      if ( loader->num_glyphs < 0 )
808      {
809        FT_ERROR(( "t42_parse_encoding: invalid number of glyphs\n" ));
810        error = FT_THROW( Invalid_File_Format );
811        goto Fail;
812      }
813
814      /* we certainly need more than 4 bytes per glyph */
815      if ( loader->num_glyphs > ( limit - parser->root.cursor ) >> 2 )
816      {
817        FT_TRACE0(( "t42_parse_charstrings: adjusting number of glyphs"
818                    " (from %d to %d)\n",
819                    loader->num_glyphs,
820                    ( limit - parser->root.cursor ) >> 2 ));
821        loader->num_glyphs = ( limit - parser->root.cursor ) >> 2;
822      }
823
824    }
825    else if ( *parser->root.cursor == '<' )
826    {
827      /* We have `<< ... >>'.  Count the number of `/' in the dictionary */
828      /* to get its size.                                                */
829      FT_Int  count = 0;
830
831
832      T1_Skip_PS_Token( parser );
833      if ( parser->root.error )
834        return;
835      T1_Skip_Spaces( parser );
836      cur = parser->root.cursor;
837
838      while ( parser->root.cursor < limit )
839      {
840        if ( *parser->root.cursor == '/' )
841          count++;
842        else if ( *parser->root.cursor == '>' )
843        {
844          loader->num_glyphs  = count;
845          parser->root.cursor = cur;        /* rewind */
846          break;
847        }
848        T1_Skip_PS_Token( parser );
849        if ( parser->root.error )
850          return;
851        T1_Skip_Spaces( parser );
852      }
853    }
854    else
855    {
856      FT_ERROR(( "t42_parse_charstrings: invalid token\n" ));
857      error = FT_THROW( Invalid_File_Format );
858      goto Fail;
859    }
860
861    if ( parser->root.cursor >= limit )
862    {
863      FT_ERROR(( "t42_parse_charstrings: out of bounds\n" ));
864      error = FT_THROW( Invalid_File_Format );
865      goto Fail;
866    }
867
868    /* initialize tables */
869
870    /* contrary to Type1, we disallow multiple CharStrings arrays */
871    if ( swap_table->init )
872    {
873      FT_ERROR(( "t42_parse_charstrings:"
874                 " only one CharStrings array allowed\n" ));
875      error = FT_THROW( Invalid_File_Format );
876      goto Fail;
877    }
878
879    error = psaux->ps_table_funcs->init( code_table,
880                                         loader->num_glyphs,
881                                         memory );
882    if ( error )
883      goto Fail;
884
885    error = psaux->ps_table_funcs->init( name_table,
886                                         loader->num_glyphs,
887                                         memory );
888    if ( error )
889      goto Fail;
890
891    /* Initialize table for swapping index notdef_index and */
892    /* index 0 names and codes (if necessary).              */
893
894    error = psaux->ps_table_funcs->init( swap_table, 4, memory );
895    if ( error )
896      goto Fail;
897
898    n = 0;
899
900    for (;;)
901    {
902      /* We support two formats.                     */
903      /*                                             */
904      /*   `/glyphname' + index [+ `def']            */
905      /*   `(glyphname)' [+ `cvn'] + index [+ `def'] */
906      /*                                             */
907      /* The latter format gets created by the       */
908      /* LilyPond typesetting program.               */
909
910      T1_Skip_Spaces( parser );
911
912      cur = parser->root.cursor;
913      if ( cur >= limit )
914        break;
915
916      /* We stop when we find an `end' keyword or '>' */
917      if ( *cur   == 'e'          &&
918           cur + 3 < limit        &&
919           cur[1] == 'n'          &&
920           cur[2] == 'd'          &&
921           t42_is_space( cur[3] ) )
922        break;
923      if ( *cur == '>' )
924        break;
925
926      T1_Skip_PS_Token( parser );
927      if ( parser->root.cursor >= limit )
928      {
929        FT_ERROR(( "t42_parse_charstrings: out of bounds\n" ));
930        error = FT_THROW( Invalid_File_Format );
931        goto Fail;
932      }
933      if ( parser->root.error )
934        return;
935
936      if ( *cur == '/' || *cur == '(' )
937      {
938        FT_UInt  len;
939        FT_Bool  have_literal = FT_BOOL( *cur == '(' );
940
941
942        if ( cur + ( have_literal ? 3 : 2 ) >= limit )
943        {
944          FT_ERROR(( "t42_parse_charstrings: out of bounds\n" ));
945          error = FT_THROW( Invalid_File_Format );
946          goto Fail;
947        }
948
949        cur++;                              /* skip `/' */
950        len = (FT_UInt)( parser->root.cursor - cur );
951        if ( have_literal )
952          len--;
953
954        error = T1_Add_Table( name_table, n, cur, len + 1 );
955        if ( error )
956          goto Fail;
957
958        /* add a trailing zero to the name table */
959        name_table->elements[n][len] = '\0';
960
961        /* record index of /.notdef */
962        if ( *cur == '.'                                              &&
963             ft_strcmp( ".notdef",
964                        (const char*)(name_table->elements[n]) ) == 0 )
965        {
966          notdef_index = n;
967          notdef_found = 1;
968        }
969
970        T1_Skip_Spaces( parser );
971
972        if ( have_literal )
973          T1_Skip_PS_Token( parser );
974
975        cur = parser->root.cursor;
976
977        (void)T1_ToInt( parser );
978        if ( parser->root.cursor >= limit )
979        {
980          FT_ERROR(( "t42_parse_charstrings: out of bounds\n" ));
981          error = FT_THROW( Invalid_File_Format );
982          goto Fail;
983        }
984
985        len = (FT_UInt)( parser->root.cursor - cur );
986
987        error = T1_Add_Table( code_table, n, cur, len + 1 );
988        if ( error )
989          goto Fail;
990
991        code_table->elements[n][len] = '\0';
992
993        n++;
994        if ( n >= loader->num_glyphs )
995          break;
996      }
997    }
998
999    loader->num_glyphs = n;
1000
1001    if ( !notdef_found )
1002    {
1003      FT_ERROR(( "t42_parse_charstrings: no /.notdef glyph\n" ));
1004      error = FT_THROW( Invalid_File_Format );
1005      goto Fail;
1006    }
1007
1008    /* if /.notdef does not occupy index 0, do our magic. */
1009    if ( ft_strcmp( (const char*)".notdef",
1010                    (const char*)name_table->elements[0] ) )
1011    {
1012      /* Swap glyph in index 0 with /.notdef glyph.  First, add index 0  */
1013      /* name and code entries to swap_table.  Then place notdef_index   */
1014      /* name and code entries into swap_table.  Then swap name and code */
1015      /* entries at indices notdef_index and 0 using values stored in    */
1016      /* swap_table.                                                     */
1017
1018      /* Index 0 name */
1019      error = T1_Add_Table( swap_table, 0,
1020                            name_table->elements[0],
1021                            name_table->lengths [0] );
1022      if ( error )
1023        goto Fail;
1024
1025      /* Index 0 code */
1026      error = T1_Add_Table( swap_table, 1,
1027                            code_table->elements[0],
1028                            code_table->lengths [0] );
1029      if ( error )
1030        goto Fail;
1031
1032      /* Index notdef_index name */
1033      error = T1_Add_Table( swap_table, 2,
1034                            name_table->elements[notdef_index],
1035                            name_table->lengths [notdef_index] );
1036      if ( error )
1037        goto Fail;
1038
1039      /* Index notdef_index code */
1040      error = T1_Add_Table( swap_table, 3,
1041                            code_table->elements[notdef_index],
1042                            code_table->lengths [notdef_index] );
1043      if ( error )
1044        goto Fail;
1045
1046      error = T1_Add_Table( name_table, notdef_index,
1047                            swap_table->elements[0],
1048                            swap_table->lengths [0] );
1049      if ( error )
1050        goto Fail;
1051
1052      error = T1_Add_Table( code_table, notdef_index,
1053                            swap_table->elements[1],
1054                            swap_table->lengths [1] );
1055      if ( error )
1056        goto Fail;
1057
1058      error = T1_Add_Table( name_table, 0,
1059                            swap_table->elements[2],
1060                            swap_table->lengths [2] );
1061      if ( error )
1062        goto Fail;
1063
1064      error = T1_Add_Table( code_table, 0,
1065                            swap_table->elements[3],
1066                            swap_table->lengths [3] );
1067      if ( error )
1068        goto Fail;
1069
1070    }
1071
1072    return;
1073
1074  Fail:
1075    parser->root.error = error;
1076  }
1077
1078
1079  static FT_Error
1080  t42_load_keyword( T42_Face    face,
1081                    T42_Loader  loader,
1082                    T1_Field    field )
1083  {
1084    FT_Error  error;
1085    void*     dummy_object;
1086    void**    objects;
1087    FT_UInt   max_objects = 0;
1088
1089
1090    /* if the keyword has a dedicated callback, call it */
1091    if ( field->type == T1_FIELD_TYPE_CALLBACK )
1092    {
1093      field->reader( (FT_Face)face, loader );
1094      error = loader->parser.root.error;
1095      goto Exit;
1096    }
1097
1098    /* now the keyword is either a simple field or a table of fields; */
1099    /* we are now going to take care of it                            */
1100
1101    switch ( field->location )
1102    {
1103    case T1_FIELD_LOCATION_FONT_INFO:
1104      dummy_object = &face->type1.font_info;
1105      break;
1106
1107    case T1_FIELD_LOCATION_FONT_EXTRA:
1108      dummy_object = &face->type1.font_extra;
1109      break;
1110
1111    case T1_FIELD_LOCATION_BBOX:
1112      dummy_object = &face->type1.font_bbox;
1113      break;
1114
1115    default:
1116      dummy_object = &face->type1;
1117    }
1118
1119    objects = &dummy_object;
1120
1121    if ( field->type == T1_FIELD_TYPE_INTEGER_ARRAY ||
1122         field->type == T1_FIELD_TYPE_FIXED_ARRAY   )
1123      error = T1_Load_Field_Table( &loader->parser, field,
1124                                   objects, max_objects, 0 );
1125    else
1126      error = T1_Load_Field( &loader->parser, field,
1127                             objects, max_objects, 0 );
1128
1129   Exit:
1130    return error;
1131  }
1132
1133
1134  FT_LOCAL_DEF( FT_Error )
1135  t42_parse_dict( T42_Face    face,
1136                  T42_Loader  loader,
1137                  FT_Byte*    base,
1138                  FT_Long     size )
1139  {
1140    T42_Parser  parser     = &loader->parser;
1141    FT_Byte*    limit;
1142    FT_Int      n_keywords = (FT_Int)( sizeof ( t42_keywords ) /
1143                                         sizeof ( t42_keywords[0] ) );
1144
1145
1146    parser->root.cursor = base;
1147    parser->root.limit  = base + size;
1148    parser->root.error  = FT_Err_Ok;
1149
1150    limit = parser->root.limit;
1151
1152    T1_Skip_Spaces( parser );
1153
1154    while ( parser->root.cursor < limit )
1155    {
1156      FT_Byte*  cur;
1157
1158
1159      cur = parser->root.cursor;
1160
1161      /* look for `FontDirectory' which causes problems for some fonts */
1162      if ( *cur == 'F' && cur + 25 < limit                    &&
1163           ft_strncmp( (char*)cur, "FontDirectory", 13 ) == 0 )
1164      {
1165        FT_Byte*  cur2;
1166
1167
1168        /* skip the `FontDirectory' keyword */
1169        T1_Skip_PS_Token( parser );
1170        T1_Skip_Spaces  ( parser );
1171        cur = cur2 = parser->root.cursor;
1172
1173        /* look up the `known' keyword */
1174        while ( cur < limit )
1175        {
1176          if ( *cur == 'k' && cur + 5 < limit             &&
1177                ft_strncmp( (char*)cur, "known", 5 ) == 0 )
1178            break;
1179
1180          T1_Skip_PS_Token( parser );
1181          if ( parser->root.error )
1182            goto Exit;
1183          T1_Skip_Spaces  ( parser );
1184          cur = parser->root.cursor;
1185        }
1186
1187        if ( cur < limit )
1188        {
1189          T1_TokenRec  token;
1190
1191
1192          /* skip the `known' keyword and the token following it */
1193          T1_Skip_PS_Token( parser );
1194          T1_ToToken( parser, &token );
1195
1196          /* if the last token was an array, skip it! */
1197          if ( token.type == T1_TOKEN_TYPE_ARRAY )
1198            cur2 = parser->root.cursor;
1199        }
1200        parser->root.cursor = cur2;
1201      }
1202
1203      /* look for immediates */
1204      else if ( *cur == '/' && cur + 2 < limit )
1205      {
1206        FT_UInt  len;
1207
1208
1209        cur++;
1210
1211        parser->root.cursor = cur;
1212        T1_Skip_PS_Token( parser );
1213        if ( parser->root.error )
1214          goto Exit;
1215
1216        len = (FT_UInt)( parser->root.cursor - cur );
1217
1218        if ( len > 0 && len < 22 && parser->root.cursor < limit )
1219        {
1220          int  i;
1221
1222
1223          /* now compare the immediate name to the keyword table */
1224
1225          /* loop through all known keywords */
1226          for ( i = 0; i < n_keywords; i++ )
1227          {
1228            T1_Field  keyword = (T1_Field)&t42_keywords[i];
1229            FT_Byte   *name   = (FT_Byte*)keyword->ident;
1230
1231
1232            if ( !name )
1233              continue;
1234
1235            if ( cur[0] == name[0]                      &&
1236                 len == ft_strlen( (const char *)name ) &&
1237                 ft_memcmp( cur, name, len ) == 0       )
1238            {
1239              /* we found it -- run the parsing callback! */
1240              parser->root.error = t42_load_keyword( face,
1241                                                     loader,
1242                                                     keyword );
1243              if ( parser->root.error )
1244                return parser->root.error;
1245              break;
1246            }
1247          }
1248        }
1249      }
1250      else
1251      {
1252        T1_Skip_PS_Token( parser );
1253        if ( parser->root.error )
1254          goto Exit;
1255      }
1256
1257      T1_Skip_Spaces( parser );
1258    }
1259
1260  Exit:
1261    return parser->root.error;
1262  }
1263
1264
1265  FT_LOCAL_DEF( void )
1266  t42_loader_init( T42_Loader  loader,
1267                   T42_Face    face )
1268  {
1269    FT_UNUSED( face );
1270
1271    FT_ZERO( loader );
1272    loader->num_glyphs = 0;
1273    loader->num_chars  = 0;
1274
1275    /* initialize the tables -- simply set their `init' field to 0 */
1276    loader->encoding_table.init = 0;
1277    loader->charstrings.init    = 0;
1278    loader->glyph_names.init    = 0;
1279  }
1280
1281
1282  FT_LOCAL_DEF( void )
1283  t42_loader_done( T42_Loader  loader )
1284  {
1285    T42_Parser  parser = &loader->parser;
1286
1287
1288    /* finalize tables */
1289    T1_Release_Table( &loader->encoding_table );
1290    T1_Release_Table( &loader->charstrings );
1291    T1_Release_Table( &loader->glyph_names );
1292    T1_Release_Table( &loader->swap_table );
1293
1294    /* finalize parser */
1295    t42_parser_done( parser );
1296  }
1297
1298
1299/* END */
1300