kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

G_INTMAX16 doesn't exist. Assume for now that it means 0x7fff.

Browse source 
No cookie for lkundrak.
This commit is contained in:
joerg 2007-07-30 07:56:27 +00:00
parent d3a02b798c
commit 60474459dc
2 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
graphics/gimp1-base/distinfo
View file

@ -1,4 +1,4 @@
$NetBSD: distinfo,v 1.3 2007/07/04 13:44:11 lkundrak Exp $
$NetBSD: distinfo,v 1.4 2007/07/30 07:56:27 joerg Exp $
SHA1 (gimp-1.2.5.tar.bz2) = 1cb7fdbd4e6b191a62011c906e1b0aaef6e623ef
RMD160 (gimp-1.2.5.tar.bz2) = d1be734271b763a22c0e8f5981c5c330a7744d31
@ -6,4 +6,4 @@ Size (gimp-1.2.5.tar.bz2) = 10885324 bytes
SHA1 (patch-aa) = 2d2f7ce110822522314aebfd86c06ebcbdbabb9d
SHA1 (patch-ac) = 9949ba730b031132a183cabf69025e36500c70f0
SHA1 (patch-ad) = 29c68f53be2d527661dcbaa38b2bf92626cb139c
SHA1 (patch-ae) = e1b22a857da4a86afcc8d3144379df114a3cf64b
SHA1 (patch-ae) = cf58dd1f447ac147d6e263d8f309d7e86e1a2fb0

4
graphics/gimp1-base/patches/patch-ae
View file

@ -1,4 +1,4 @@
$NetBSD: patch-ae,v 1.1 2007/07/04 13:44:11 lkundrak Exp $
$NetBSD: patch-ae,v 1.2 2007/07/30 07:56:27 joerg Exp $
Fix for CVE-2007-2949 heap overflow from upstream.
@ -8,7 +8,7 @@ Fix for CVE-2007-2949 heap overflow from upstream.
width = psd_image.layer[layeri].channel[channeli].width;
height = psd_image.layer[layeri].channel[channeli].height;
+ if (width > G_MAXINT16 || height > G_MAXINT16)
+ if (width > 0x7FFF || height > 0x7FFF)
+ {
+ g_message ("Error: Invalid channel dimensions");
+ gimp_quit ();