--- texk/dvipng/dvipng-1.14/vf.c +++ texk/dvipng/dvipng-1.14/vf.c 2010-04-12 14:35:53.414925428 +0000 @@ -115,7 +115,7 @@ void InitVF(struct font_entry * tfontp) tcharptr->tfmw = (int32_t) ((int64_t) tcharptr->tfmw * tfontp->s / (1 << 20)); DEBUG_PRINT(DEBUG_VF,(" (%d)",tcharptr->tfmw)); - if (c >= NFNTCHARS) /* Only positive for now */ + if (c < 0 || c >= NFNTCHARS) /* Only positive for now */ Fatal("VF font %s exceeds char numbering limit",tfontp->name); tfontp->chr[c] = tcharptr; tcharptr->data=position;