pkgsrc/print/evince/patches/patch-bd
drochner 12b350fd74 add patches from upstream to fix security issues in the dvi-backend
(CVE-2010-2640, CVE-2010-2641, CVE-2010-2642 and CVE-2010-2643)
The dvi backend is only built with the (non-default) "dvi" option.
2011-01-10 20:16:55 +00:00

14 lines
529 B
Text

$NetBSD: patch-bd,v 1.1 2011/01/10 20:16:56 drochner Exp $
--- backend/dvi/mdvi-lib/tfmfile.c.orig 2010-07-14 07:54:39.000000000 +0000
+++ backend/dvi/mdvi-lib/tfmfile.c
@@ -172,7 +172,8 @@ int tfm_load_file(const char *filename,
/* We read the entire TFM file into core */
if(fstat(fileno(in), &st) < 0)
return -1;
- if(st.st_size == 0)
+ /* according to the spec, TFM files are smaller than 16K */
+ if(st.st_size == 0 || st.st_size >= 16384)
goto bad_tfm;
/* allocate a word-aligned buffer to hold the file */