From 939c6641331e97f5b0df550abd1af4c066250d34 Mon Sep 17 00:00:00 2001
From: Jonathan Kew <jfkthame@gmail.com>
Date: Mon, 2 May 2011 10:01:54 +0100
Subject: [PATCH] bug 653408 - [ots] fix GDEF sanitizer so it doesn't reject
 LinLibertine. r=jdaggett

---
 gfx/ots/src/gdef.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gfx/ots/src/gdef.cc b/gfx/ots/src/gdef.cc
index d5c44eab175..e163b0ebeec 100644
--- a/gfx/ots/src/gdef.cc
+++ b/gfx/ots/src/gdef.cc
@@ -155,7 +155,7 @@ bool ParseLigCaretListTable(ots::OpenTypeFile *file, const uint8_t *data,
     std::vector<uint16_t> caret_values;
     caret_values.resize(caret_count);
     uint16_t last_offset_caret = 0;
-    unsigned caret_values_end = static_cast<unsigned>(2) * 2*caret_count;
+    unsigned caret_values_end = static_cast<unsigned>(2) + 2*caret_count;
     for (unsigned j = 0; j < caret_count; ++j) {
       if (!subtable.ReadU16(&caret_values[j])) {
         return OTS_FAILURE();