b874ab977f
"Multiple buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to execute arbitrary code via certain image files." (1.9.15 is also affected) http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1026 Patch from Pavel Kankovsky.
13 lines
385 B
Text
13 lines
385 B
Text
$NetBSD: patch-ak,v 1.1 2004/12/10 09:30:42 salo Exp $
|
|
|
|
--- gdk_imlib/io-gif.c.orig 2002-03-04 18:06:29.000000000 +0100
|
|
+++ gdk_imlib/io-gif.c 2004-12-10 10:00:56.000000000 +0100
|
|
@@ -55,7 +55,7 @@
|
|
}
|
|
*w = gif->Image.Width;
|
|
*h = gif->Image.Height;
|
|
- if(*h > 32767 || *w > 32767)
|
|
+ if(*h <= 0 || *h > 32767 || *w <= 0 || *w > 32767)
|
|
{
|
|
return NULL;
|
|
}
|