[PATCH 2/5] dwrite: Disallow recursing to reverse chaining substitution.

[Nikolay Sivov]

Signed-off-by: Nikolay Sivov 
---
 dlls/dwrite/opentype.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/dlls/dwrite/opentype.c b/dlls/dwrite/opentype.c
index 22ae1069240..e502be1e12b 100644
--- a/dlls/dwrite/opentype.c
+++ b/dlls/dwrite/opentype.c
@@ -5482,6 +5482,9 @@ static BOOL opentype_layout_apply_gsub_reverse_chain_context_substitution(struct
     unsigned int offset = subtable_offset;
     UINT16 glyph, format;

+    if (context->nesting_level_left != SHAPE_MAX_NESTING_LEVEL)
+        return FALSE;
+
     glyph = context->u.subst.glyphs[context->cur];

format = table_read_be_word(table, offset);