[patch] The fix

cve-2009-3736.patch (text/plain), 846 bytes, created by Arseny Solokha on 2009-12-02 12:01:21 UTC

Record from the GraphicsMagick changelog dated by Nov 17 22:14:09 2009 UTC:
[trimmed]
* ltdl/ltdl.c: Update libltdl to 2.2.6b in order to fix security
issue.  Resolves CVE-2009-3736 as it pertains to GraphicsMagick.
[/trimmed]

--- ltdl/ltdl.c.jj	2008-09-09 09:35:02.000000000 +0800
+++ ltdl/ltdl.c	2009-12-02 18:09:10.409151129 +0700
@@ -529,7 +529,8 @@
   /* Try to open the old library first; if it was dlpreopened,
      we want the preopened version of it, even if a dlopenable
      module is available.  */
-  if (old_name && tryall_dlopen (handle, old_name, advise, 0) == 0)
+  if (old_name && tryall_dlopen (handle, old_name,
+			  advise, lt_dlloader_find ("lt_preopen") ) == 0)
     {
       return 0;
     }
@@ -1345,7 +1346,7 @@
 	    }
 #endif
 	}
-      if (!file)
+      else
 	{
 	  file = fopen (attempt, LT_READTEXT_MODE);
 	}