ttml_descriptor: text description skipped, if font usage present
When the ttml_descriptor is parsed and the font usage substructure is present (essential_font_usage_flag
set), the variable i_data
is decremented by 1 + p_data[0]
. However, p_data[0]
has already been incremented in the line before, though its old value is needed here (as p_data[0]
refers to the font_count
field).
p_data += 1 + p_data[0];
i_data -= 1 + p_data[0];
As a consequence, the len check just below fails and the text description is skipped by mistake.