[patch] ghostscript-8.60-CVE-2008-0411.diff

ghostscript-8.60-CVE-2008-0411.diff (text/plain), 415 bytes, created by Robert Buchholz (RETIRED) on 2008-02-14 02:28:50 UTC

--- src/zicc.c
+++ src/zicc.c	2008-02-05 16:11:59.000000000 +0000
@@ -77,6 +77,9 @@ zseticcspace(i_ctx_t * i_ctx_p)
     dict_find_string(op, "N", &pnval);
     ncomps = pnval->value.intval;
 
+    if (2*ncomps > sizeof(range_buff)/sizeof(float))
+	return_error(e_rangecheck);
+
     /* verify the DataSource entry */
     if (dict_find_string(op, "DataSource", &pstrmval) <= 0)
         return_error(e_undefined);