ba2199bc82
- Resolve backlog of CVEs PR: 201513 Reported by: Sevan Janiyan Submitted by: Jason Unovitch (maintainer) Security: CVE-2004-0941 [1] Security: CVE-2007-0455 [1] Security: CVE-2007-2756 [1] Security: CVE-2007-3472 [1] Security: CVE-2007-3473 [1] Security: CVE-2007-3477 [1] Security: CVE-2009-3546 [1] Security: CVE-2015-4695 [2] Security: CVE-2015-4696 [3] Security: CVE-2015-0848 [4] Security: CVE-2015-4588 [4] Security: ca139c7f-2a8c-11e5-a4a5-002590263bf5 Obtained From: CentOS libwmf RPM git [1] Obtained From: Debian Bug 784205 [2] Obtained From: Debian Bug 784192 [3] Obtained From: Red Hat Bug 1227243 [4] MFH: 2015Q3
58 lines
1.9 KiB
Text
58 lines
1.9 KiB
Text
Index: src/player/meta.h
|
|
===================================================================
|
|
--- libwmf-0.2.8.4.orig/src/player/meta.h
|
|
+++ src/player/meta.h
|
|
@@ -1565,7 +1565,7 @@ static int meta_rgn_create (wmfAPI* API,
|
|
objects = P->objects;
|
|
|
|
i = 0;
|
|
- while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
|
|
+ while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
|
|
|
|
if (i == NUM_OBJECTS (API))
|
|
{ WMF_ERROR (API,"Object out of range!");
|
|
@@ -2142,7 +2142,7 @@ static int meta_dib_brush (wmfAPI* API,w
|
|
objects = P->objects;
|
|
|
|
i = 0;
|
|
- while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
|
|
+ while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
|
|
|
|
if (i == NUM_OBJECTS (API))
|
|
{ WMF_ERROR (API,"Object out of range!");
|
|
@@ -3067,7 +3067,7 @@ static int meta_pen_create (wmfAPI* API,
|
|
objects = P->objects;
|
|
|
|
i = 0;
|
|
- while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
|
|
+ while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
|
|
|
|
if (i == NUM_OBJECTS (API))
|
|
{ WMF_ERROR (API,"Object out of range!");
|
|
@@ -3181,7 +3181,7 @@ static int meta_brush_create (wmfAPI* AP
|
|
objects = P->objects;
|
|
|
|
i = 0;
|
|
- while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
|
|
+ while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
|
|
|
|
if (i == NUM_OBJECTS (API))
|
|
{ WMF_ERROR (API,"Object out of range!");
|
|
@@ -3288,7 +3288,7 @@ static int meta_font_create (wmfAPI* API
|
|
objects = P->objects;
|
|
|
|
i = 0;
|
|
- while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
|
|
+ while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
|
|
|
|
if (i == NUM_OBJECTS (API))
|
|
{ WMF_ERROR (API,"Object out of range!");
|
|
@@ -3396,7 +3396,7 @@ static int meta_palette_create (wmfAPI*
|
|
objects = P->objects;
|
|
|
|
i = 0;
|
|
- while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
|
|
+ while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
|
|
|
|
if (i == NUM_OBJECTS (API))
|
|
{ WMF_ERROR (API,"Object out of range!");
|