Re: [PATCH v11 0/1] MR10660: uniscribe: Correct possible buffer over/under runs

[Huw Davies (＠huw)]

Huw Davies (@huw) commented about dlls/gdi32/uniscribe/opentype.c:
> for (k = 0; k < backtrack_count; ++k)
>              {
> +                unsigned int next_glyph_index;
>                  offset = GET_BE_WORD(backtrack->Coverage[k]);
> -                if (GSUB_is_glyph_covered((const BYTE *)backtrack + offset,
> -                        glyphs[glyph_index + (dirBacktrack * (k + 1))]) == -1)
> +                next_glyph_index  = glyph_index + (dirBacktrack * (k + 1));

Double space here and also further down.

-- 
https://gitlab.winehq.org/wine/wine/-/merge_requests/10660#note_140755