From c9523a6ee0f31fc2cd64cb6988fcbdbe08c1509d Mon Sep 17 00:00:00 2001
From: Mitchell Hashimoto <m@mitchellh.com>
Date: Thu, 5 Sep 2024 20:21:32 -0700
Subject: [PATCH] font/sprite: avoid invalid glyph if unsupported codepoint is
 attempted

---
 src/font/sprite/Face.zig | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/src/font/sprite/Face.zig b/src/font/sprite/Face.zig
index 47e0c06d7..adbe9bece 100644
--- a/src/font/sprite/Face.zig
+++ b/src/font/sprite/Face.zig
@@ -71,8 +71,21 @@ pub fn renderGlyph(
         else => |width| self.width * width,
     };
 
+    // It should be impossible for this to be null and we assert that
+    // in runtime safety modes but in case it is its not worth memory
+    // corruption so we return a valid, blank glyph.
+    const kind = Kind.init(cp) orelse return .{
+        .width = 0,
+        .height = 0,
+        .offset_x = 0,
+        .offset_y = 0,
+        .atlas_x = 0,
+        .atlas_y = 0,
+        .advance_x = 0,
+    };
+
     // Safe to ".?" because of the above assertion.
-    return switch (Kind.init(cp).?) {
+    return switch (kind) {
         .box => box: {
             const thickness = switch (cp) {
                 @intFromEnum(Sprite.cursor_rect),