pkgsrc/graphics/openexr/patches/patch-ai
hasso 02ed902143 Add patches for CVE-2009-1720 (multiple integer overflows in OpenEXR) and
CVE-2009-1721 (denial of service (application crash) or possibly execute
arbitrary code in the Imf::hufUncompress function). Bump PKGREVISION.
2009-08-28 21:33:07 +00:00

13 lines
434 B
Text

$NetBSD: patch-ai,v 1.1 2009/08/28 21:33:08 hasso Exp $
--- IlmImf/ImfAutoArray.h.orig 2007-04-23 20:26:56.000000000 -0500
+++ IlmImf/ImfAutoArray.h 2009-07-29 13:22:08.309288375 -0500
@@ -57,7 +57,7 @@ namespace Imf {
{
public:
- AutoArray (): _data (new T [size]) {}
+ AutoArray (): _data (new T [size]) {memset(_data, 0, size * sizeof(T));}
~AutoArray () {delete [] _data;}
operator T * () {return _data;}