[patch] tetex-2.0.2-xpdf-CVE-2007-3387.patch

tetex-2.0.2-xpdf-CVE-2007-3387.patch (text/plain), 636 bytes, created by Robert Buchholz (RETIRED) on 2007-10-21 22:40:52 UTC

Index: tetex-src-2.0.2/libs/xpdf/xpdf/Stream.cc
===================================================================
--- tetex-src-2.0.2.orig/libs/xpdf/xpdf/Stream.cc
+++ tetex-src-2.0.2/libs/xpdf/xpdf/Stream.cc
@@ -424,7 +424,12 @@ StreamPredictor::StreamPredictor(Stream 
   }
   pixBytes = (nComps * nBits + 7) >> 3;
   rowBytes = ((nVals * nBits + 7) >> 3) + pixBytes;
-  if (rowBytes < 0) {
+  if (width <= 0 || nComps <= 0 || nBits <= 0 ||
+     nComps > gfxColorMaxComps ||
+     nBits > 16 ||
+     nVals <= 0 ||
+     nVals * nBits + 7 <= 0 ||
+     rowBytes <= 0) {
     return;
   }
   predLine = (Guchar *)gmalloc(rowBytes);