Optional module · pdftoolkit/opentype 0.1.0
English | Français
Report vulnerabilities privately through GitHub Security Advisories, with the version, minimal input and configured limits.
Readers receive application-supplied bytes. They do not open paths or URLs or
execute font bytecode. ReadLimits bounds source bytes, tables, layout records,
glyph counts, substitution operations and output. Binary views bound reads; readers validate
indices, ordering and referenced glyphs. Unsupported selected mechanisms fail.
Tests exercise truncated and malformed input, invalid offsets and indices, checksum failures and bounded expansion. Independent checks compare supported results with fontTools and HarfBuzz. These checks cover the implemented readers; this package is not a sanitizer for arbitrary font tables. Applications control file access and execution-time and memory quotas.
The 0.1.x series receives security fixes. PHP 8.3+ on a 64-bit platform is
required; CI covers PHP 8.3, 8.4 and 8.5.