Harfbuzz roll 3ab7b37bdebf0f8773493a1fee910b151c4de30f

third_party/harfbuzz/src/harfbuzz-tibetan.c

 /*
  * Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies)
  *
  * This is part of HarfBuzz, an OpenType Layout engine library.
  *
  * Permission is hereby granted, without written agreement and without
  * license or royalty fees, to use, copy, modify, and distribute this
  * software and its documentation for any purpose, provided that the
  * above copyright notice and the following two paragraphs appear in
  * all copies of this software.
@@ skipping 95 matching lines @@
     const HB_UChar16 *str = item->string + item->item.pos;
     int len = item->item.length;
 #ifndef NO_OPENTYPE
     const int availableGlyphs = item->num_glyphs;
 #endif
     HB_Bool haveGlyphs;
     HB_STACKARRAY(HB_UChar16, reordered, len + 4);
 
     if (item->num_glyphs < item->item.length + 4) {
         item->num_glyphs = item->item.length + 4;
+        HB_FREE_STACKARRAY(reordered);
         return FALSE;
     }
 
     if (invalid) {
         *reordered = 0x25cc;
         memcpy(reordered+1, str, len*sizeof(HB_UChar16));
         len++;
         str = reordered;
     }
 
@@ skipping 139 matching lines @@
         while (i < boundary) {
             attributes[i].charStop = FALSE;
             ++uc;
             ++i;
         }
         assert(i == boundary);
     }
 }