diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2020-11-27 20:40:32 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2020-11-28 08:59:50 +0100 |
| commit | f7c461c24b8544648a3ed3f6a9d92ef51e50af43 (patch) | |
| tree | 0bf9d98cfeade9719877f6bf54c3229691bc5338 /source/l/libwmf/libwmf-0.2.8.4-CVE-2007-3472.patch | |
| parent | dbf5c1c4390d04802e7b37be3d2012bb8eae6675 (diff) | |
| download | current-20201127204032.tar.gz current-20201127204032.tar.xz | |
Fri Nov 27 20:40:32 UTC 202020201127204032
a/dialog-1.3_20201126-x86_64-1.txz: Upgraded.
l/adwaita-icon-theme-3.38.0-noarch-1.txz: Upgraded.
l/gsettings-desktop-schemas-3.38.0-x86_64-1.txz: Upgraded.
l/gtk+3-3.24.23-x86_64-2.txz: Rebuilt.
Applied upstream patch to fix middle click pasting between GTK+ and KDE apps
on Wayland. Thanks to Heinz Wiesinger.
l/gtksourceview3-3.24.11-x86_64-2.txz: Rebuilt.
Get rid of stray .la file.
l/libwmf-0.2.12-x86_64-1.txz: Upgraded.
l/utf8proc-2.6.0-x86_64-1.txz: Upgraded.
n/fetchmail-6.4.14-x86_64-1.txz: Upgraded.
n/php-7.4.13-x86_64-1.txz: Upgraded.
x/libinput-1.16.4-x86_64-1.txz: Upgraded.
Diffstat (limited to 'source/l/libwmf/libwmf-0.2.8.4-CVE-2007-3472.patch')
| -rw-r--r-- | source/l/libwmf/libwmf-0.2.8.4-CVE-2007-3472.patch | 61 |
1 files changed, 0 insertions, 61 deletions
diff --git a/source/l/libwmf/libwmf-0.2.8.4-CVE-2007-3472.patch b/source/l/libwmf/libwmf-0.2.8.4-CVE-2007-3472.patch deleted file mode 100644 index ac1ead5a8..000000000 --- a/source/l/libwmf/libwmf-0.2.8.4-CVE-2007-3472.patch +++ /dev/null @@ -1,61 +0,0 @@ ---- libwmf-0.2.8.4/src/extra/gd/gd.c -+++ libwmf-0.2.8.4/src/extra/gd/gd.c -@@ -106,6 +106,18 @@ - gdImagePtr im; - unsigned long cpa_size; - -+ if (overflow2(sx, sy)) { -+ return NULL; -+ } -+ -+ if (overflow2(sizeof (int *), sy)) { -+ return NULL; -+ } -+ -+ if (overflow2(sizeof(int), sx)) { -+ return NULL; -+ } -+ - im = (gdImage *) gdMalloc (sizeof (gdImage)); - if (im == 0) return 0; - memset (im, 0, sizeof (gdImage)); ---- libwmf-0.2.8.4/src/extra/gd/gdhelpers.c 2010-12-06 11:47:31.000000000 +0000 -+++ libwmf-0.2.8.4/src/extra/gd/gdhelpers.c 2010-12-06 11:48:04.000000000 +0000 -@@ -2,6 +2,7 @@ - #include "gdhelpers.h" - #include <stdlib.h> - #include <string.h> -+#include <limits.h> - - /* TBB: gd_strtok_r is not portable; provide an implementation */ - -@@ -94,3 +95,18 @@ - { - free (ptr); - } -+ -+int overflow2(int a, int b) -+{ -+ if(a < 0 || b < 0) { -+ fprintf(stderr, "gd warning: one parameter to a memory allocation multiplication is negative, failing operation gracefully\n"); -+ return 1; -+ } -+ if(b == 0) -+ return 0; -+ if(a > INT_MAX / b) { -+ fprintf(stderr, "gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully\n"); -+ return 1; -+ } -+ return 0; -+} ---- libwmf-0.2.8.4/src/extra/gd/gdhelpers.h 2010-12-06 11:47:17.000000000 +0000 -+++ libwmf-0.2.8.4/src/extra/gd/gdhelpers.h 2010-12-06 11:48:36.000000000 +0000 -@@ -15,6 +15,8 @@ - void *gdMalloc(size_t size); - void *gdRealloc(void *ptr, size_t size); - -+int overflow2(int a, int b); -+ - #pragma GCC visibility pop - - #endif /* GDHELPERS_H */ |