Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 208213 Details for
Bug 290464
<app-text/poppler-0.12.3-r3: Integer Overflows (CVE-2009-{3603,3604,3605,3606,3607,3608,3609})
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
poppler-CVE-2009-3607.patch
poppler-CVE-2009-3607.patch (text/plain), 1.65 KB, created by
Alex Legler (RETIRED)
on 2009-10-25 15:28:24 UTC
(
hide
)
Description:
poppler-CVE-2009-3607.patch
Filename:
MIME Type:
Creator:
Alex Legler (RETIRED)
Created:
2009-10-25 15:28:24 UTC
Size:
1.65 KB
patch
obsolete
>Patch for Gentoo bug 290464. Retrieved from upstream git. -a3li@g.o > >commit c839b706092583f6b12ed3cc634bf5af34b7a2bb >Author: Carlos Garcia Campos <carlosgc@gnome.org> >Date: Tue Oct 20 10:09:13 2009 +0200 > > [glib] Fix CVE-2009-3607 > >diff --git a/glib/poppler-page.cc b/glib/poppler-page.cc >index 225c97b..3c0ead1 100644 >--- a/glib/poppler-page.cc >+++ b/glib/poppler-page.cc >@@ -609,28 +609,28 @@ create_surface_from_thumbnail_data (guchar *data, > gint rowstride) > { > guchar *cairo_pixels; >+ gint cairo_stride; > cairo_surface_t *surface; >- static cairo_user_data_key_t key; > int j; > >- cairo_pixels = (guchar *)g_malloc (4 * width * height); >- surface = cairo_image_surface_create_for_data ((unsigned char *)cairo_pixels, >- CAIRO_FORMAT_RGB24, >- width, height, 4 * width); >- cairo_surface_set_user_data (surface, &key, >- cairo_pixels, (cairo_destroy_func_t)g_free); >+ surface = cairo_image_surface_create (CAIRO_FORMAT_RGB24, width, height); >+ if (cairo_surface_status (surface)) >+ return NULL; >+ >+ cairo_pixels = cairo_image_surface_get_data (surface); >+ cairo_stride = cairo_image_surface_get_stride (surface); > > for (j = height; j; j--) { > guchar *p = data; > guchar *q = cairo_pixels; > guchar *end = p + 3 * width; >- >+ > while (p < end) { > #if G_BYTE_ORDER == G_LITTLE_ENDIAN > q[0] = p[2]; > q[1] = p[1]; > q[2] = p[0]; >-#else >+#else > q[1] = p[0]; > q[2] = p[1]; > q[3] = p[2]; >@@ -640,7 +640,7 @@ create_surface_from_thumbnail_data (guchar *data, > } > > data += rowstride; >- cairo_pixels += 4 * width; >+ cairo_pixels += cairo_stride; > } > > return surface;
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 290464
: 208213