diff options
Diffstat (limited to 'kde/kdegraphics/CVE-2010-2575.patch')
| -rw-r--r-- | kde/kdegraphics/CVE-2010-2575.patch | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/kde/kdegraphics/CVE-2010-2575.patch b/kde/kdegraphics/CVE-2010-2575.patch new file mode 100644 index 000000000..5d4394b2a --- /dev/null +++ b/kde/kdegraphics/CVE-2010-2575.patch @@ -0,0 +1,28 @@ +--- okular/generators/plucker/unpluck/image.cpp (revision 1162413) ++++ okular/generators/plucker/unpluck/image.cpp (working copy) +@@ -289,8 +289,23 @@ + for (j = 0; j < bytes_per_row;) { + incount = *palm_ptr++; + inval = *palm_ptr++; +- memset (rowbuf + j, inval, incount); +- j += incount; ++ if (incount + j <= bytes_per_row * width) ++ { ++ memset (rowbuf + j, inval, incount); ++ j += incount; ++ } ++ else ++ { ++ free (rowbuf); ++ free (lastrow); ++ free (jpeg_row); ++ ++ jpeg_destroy_compress (&cinfo); ++ ++ fclose( outfile ); ++ ++ return false; ++ } + } + } + else if ((flags & PALM_IS_COMPRESSED_FLAG) |