Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 78206 Details for
Bug 120451
app-text/xpdf possible second round this year (CVE-2006-0301) (Vendor-sec)
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
xpdf-splash-overflow.diff
xpdf-splash-overflow.diff (text/plain), 1.35 KB, created by
Sune Kloppenborg Jeppesen (RETIRED)
on 2006-01-26 11:48:13 UTC
(
hide
)
Description:
xpdf-splash-overflow.diff
Filename:
MIME Type:
Creator:
Sune Kloppenborg Jeppesen (RETIRED)
Created:
2006-01-26 11:48:13 UTC
Size:
1.35 KB
patch
obsolete
>Index: xpdf/splash/Splash.cc >=================================================================== >--- xpdf/splash/Splash.cc (revision 498958) >+++ xpdf/splash/Splash.cc (working copy) >@@ -928,6 +928,10 @@ void Splash::drawPixel(int x, int y, Spl > int alpha2, ialpha2; > Guchar t; > >+ if ( (unsigned) x >= (unsigned) bitmap->getWidth() || >+ (unsigned) y >= (unsigned) bitmap->getHeight()) >+ return; >+ > if (noClip || state->clip->test(x, y)) { > if (alpha != 1 || softMask || state->blendFunc) { > blendFunc = state->blendFunc ? state->blendFunc : &blendNormal; >@@ -1195,6 +1199,11 @@ void Splash::drawSpan(int x0, int x1, in > updateModY(y); > } > >+ if ((unsigned) x0 >= (unsigned) bitmap->getWidth() || >+ (unsigned) x1 >= (unsigned) bitmap->getWidth() || >+ (unsigned) y >= (unsigned) bitmap->getHeight()) >+ return; >+ > if (alpha != 1 || softMask || state->blendFunc) { > blendFunc = state->blendFunc ? state->blendFunc : &blendNormal; > if (softMask) { >@@ -1825,6 +1834,11 @@ void Splash::xorSpan(int x0, int x1, int > updateModY(y); > } > >+ if ((unsigned) x0 >= (unsigned) bitmap->getWidth() || >+ (unsigned) x1 >= (unsigned) bitmap->getWidth() || >+ (unsigned) y >= (unsigned) bitmap->getHeight()) >+ return; >+ > switch (bitmap->mode) { > case splashModeMono1: > p = &bitmap->data[y * bitmap->rowSize + (x0 >> 3)];
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 120451
: 78206