From 7f9373ffd10f6c9fbfa728d600f19c1e8bacfa90 Mon Sep 17 00:00:00 2001
From: Kovid Goyal <kovid@kovidgoyal.net>
Date: Wed, 24 Jun 2026 07:00:24 +0530
Subject: [PATCH] Check tuple set item index

---
 kitty/font-names.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/kitty/font-names.c b/kitty/font-names.c
index f482a18b9..117358640 100644
--- a/kitty/font-names.c
+++ b/kitty/font-names.c
@@ -287,7 +287,11 @@ read_STAT_font_table(const uint8_t *table, size_t table_len, PyObject *name_look
                 PyObject *e = Py_BuildValue("{sH sN sO}", "flags", flags,
                         "name", get_best_name(name_lookup_table, value_name_id), "values", values);
                 if (!e) return false;
-                PyTuple_SET_ITEM(multi_axis_styles, i++, e);
+                if (i >= PyTuple_GET_SIZE(multi_axis_styles)) {
+                    PyErr_Format(PyExc_IndexError, "corrupted STAT table in font too many multi_axis_styles (%d > %d)", (int)i, (int)PyTuple_GET_SIZE(multi_axis_styles));
+                    return false;
+                }
+                PyTuple_SET_ITEM(multi_axis_styles, i, e); i++;
             } break;
         }
     }