diff options
| author | josef <josef@FreeBSD.org> | 2004-12-25 07:07:06 +0800 |
|---|---|---|
| committer | josef <josef@FreeBSD.org> | 2004-12-25 07:07:06 +0800 |
| commit | b5487b9a7e8dd8677ba0abd4b2e67e4bc6936d80 (patch) | |
| tree | f88df4e9ee7774626f086c0764af9fe4d850cb24 /print/teTeX-base | |
| parent | cda3ce13c46a8dbd5ae140ccd6e81ddee13c5998 (diff) | |
| download | freebsd-ports-gnome-b5487b9a7e8dd8677ba0abd4b2e67e4bc6936d80.tar.gz freebsd-ports-gnome-b5487b9a7e8dd8677ba0abd4b2e67e4bc6936d80.tar.zst freebsd-ports-gnome-b5487b9a7e8dd8677ba0abd4b2e67e4bc6936d80.zip | |
Patch vulnerability in imported xpdf code. Bump PORTREVISION.
Approved by: pav(mentor)
With hat: secteam
References: http://www.vuxml.org/freebsd/e3e266e9-5473-11d9-a9e7-0001020eed82.html
Diffstat (limited to 'print/teTeX-base')
| -rw-r--r-- | print/teTeX-base/Makefile | 2 | ||||
| -rw-r--r-- | print/teTeX-base/files/patch-CAN-2004-1125 | 27 |
2 files changed, 28 insertions, 1 deletions
diff --git a/print/teTeX-base/Makefile b/print/teTeX-base/Makefile index 20773b5e0416..8c4c98d7e3be 100644 --- a/print/teTeX-base/Makefile +++ b/print/teTeX-base/Makefile @@ -7,7 +7,7 @@ PORTNAME= teTeX-base PORTVERSION= 2.0.2 -PORTREVISION= 6 +PORTREVISION= 7 CATEGORIES= print MASTER_SITES= ftp://sunsite.informatik.rwth-aachen.de/pub/comp/tex/teTeX/2.0/distrib/ \ ${MASTER_SITE_TEX_CTAN} diff --git a/print/teTeX-base/files/patch-CAN-2004-1125 b/print/teTeX-base/files/patch-CAN-2004-1125 new file mode 100644 index 000000000000..9f7d9445b2f6 --- /dev/null +++ b/print/teTeX-base/files/patch-CAN-2004-1125 @@ -0,0 +1,27 @@ +--- libs/xpdf/xpdf/Gfx.cc Mon May 17 21:37:57 2004 ++++ libs/xpdf/xpdf/Gfx.cc Fri Dec 24 17:01:42 2004 +@@ -2654,7 +2654,9 @@ + haveMask = gFalse; + dict->lookup("Mask", &maskObj); + if (maskObj.isArray()) { +- for (i = 0; i < maskObj.arrayGetLength(); ++i) { ++ for (i = 0; ++ i < maskObj.arrayGetLength() && i < 2*gfxColorMaxComps; ++ ++i) { + maskObj.arrayGet(i, &obj1); + maskColors[i] = obj1.getInt(); + obj1.free(); +--- libs/xpdf/xpdf/GfxState.cc Mon May 17 21:37:57 2004 ++++ libs/xpdf/xpdf/GfxState.cc Fri Dec 24 17:01:42 2004 +@@ -714,6 +714,11 @@ + } + nCompsA = obj2.getInt(); + obj2.free(); ++ if (nCompsA > gfxColorMaxComps) { ++ error(-1, "ICCBased color space with too many (%d > %d) components", ++ nCompsA, gfxColorMaxComps); ++ nCompsA = gfxColorMaxComps; ++ } + if (dict->lookup("Alternate", &obj2)->isNull() || + !(altA = GfxColorSpace::parse(&obj2))) { + switch (nCompsA) { |