freebsd-ports/x11/kdelibs3/files/patch-CVE-2006-4811
Markus Brueffer 0892524a3b - Fix an integer overflow vulnerability in Qt and kdelibs
- Bump PORTREVISIONs

Approved by:	portmgr (erwin)
Security:	CVE-2006-4811
Security:	https://rhn.redhat.com/errata/RHSA-2006-0720.html
2006-10-23 11:14:54 +00:00

14 lines
859 B
Text

Index: khtml/rendering/render_image.cpp
===================================================================
--- khtml/rendering/render_image.cpp (revision 594232)
+++ khtml/rendering/render_image.cpp (working copy)
@@ -294,7 +294,8 @@ void RenderImage::paint(PaintInfo& paint
if ( (cWidth != intrinsicWidth() || cHeight != intrinsicHeight()) &&
pix.width() > 0 && pix.height() > 0 && i->valid_rect().isValid())
{
- if (resizeCache.isNull() && cWidth && cHeight && intrinsicWidth() && intrinsicHeight())
+ if (resizeCache.isNull() && cWidth > 0 && cHeight > 0 && intrinsicWidth() && intrinsicHeight()
+ && cWidth < 4096 && cHeight < 4096)
{
QRect scaledrect(i->valid_rect());
// kdDebug(6040) << "time elapsed: " << dt->elapsed() << endl;