Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 30917 Details for
Bug 49887
media-libs/libpng : Denial of Service vulnerability
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
files/libpng-1.2.5-gentoo.diff
libpng-1.2.5-gentoo.diff (text/plain), 2.09 KB, created by
Thierry Carrez (RETIRED)
on 2004-05-07 03:11:35 UTC
(
hide
)
Description:
files/libpng-1.2.5-gentoo.diff
Filename:
MIME Type:
Creator:
Thierry Carrez (RETIRED)
Created:
2004-05-07 03:11:35 UTC
Size:
2.09 KB
patch
obsolete
>--- libpng3-1.2.5.orig/pngrtran.c >+++ libpng3-1.2.5/pngrtran.c >@@ -1930,7 +1930,7 @@ > if (flags & PNG_FLAG_FILLER_AFTER) > { > png_bytep sp = row + (png_size_t)row_width * 3; >- png_bytep dp = sp + (png_size_t)row_width; >+ png_bytep dp = sp + (png_size_t)row_width ; > for (i = 1; i < row_width; i++) > { > *(--dp) = lo_filler; >@@ -1947,7 +1947,7 @@ > else > { > png_bytep sp = row + (png_size_t)row_width * 3; >- png_bytep dp = sp + (png_size_t)row_width; >+ png_bytep dp = sp + (png_size_t)row_width ; > for (i = 0; i < row_width; i++) > { > *(--dp) = *(--sp); >@@ -1965,8 +1965,8 @@ > /* This changes the data from RRGGBB to RRGGBBXX */ > if (flags & PNG_FLAG_FILLER_AFTER) > { >- png_bytep sp = row + (png_size_t)row_width * 3; >- png_bytep dp = sp + (png_size_t)row_width; >+ png_bytep sp = row + (png_size_t)row_width * 6; >+ png_bytep dp = sp + (png_size_t)row_width * 2; > for (i = 1; i < row_width; i++) > { > *(--dp) = hi_filler; >@@ -1987,8 +1987,8 @@ > /* This changes the data from RRGGBB to XXRRGGBB */ > else > { >- png_bytep sp = row + (png_size_t)row_width * 3; >- png_bytep dp = sp + (png_size_t)row_width; >+ png_bytep sp = row + (png_size_t)row_width * 6; >+ png_bytep dp = sp + (png_size_t)row_width * 2; > for (i = 0; i < row_width; i++) > { > *(--dp) = *(--sp); >--- libpng3-1.2.5.orig/pngerror.c 2002-10-03 05:32:27.000000000 -0600 >+++ libpng3-1.2.5/pngerror.c 2004-04-29 09:26:18.000000000 -0600 >@@ -135,10 +135,12 @@ > buffer[iout] = 0; > else > { >+ png_size_t len = strnlen(error_message, 63); >+ > buffer[iout++] = ':'; > buffer[iout++] = ' '; >- png_memcpy(buffer+iout, error_message, 64); >- buffer[iout+63] = 0; >+ png_memcpy(buffer+iout, error_message, len); >+ buffer[iout+len] = 0; > } > }
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 49887
: 30917 |
30918