diff options
author | 2011-09-01 08:35:34 -0500 | |
---|---|---|
committer | 2011-09-01 08:35:34 -0500 | |
commit | 0675585c50b904a808f5db83fc25f9dce6f6a7f9 (patch) | |
tree | 199348b5ff4db7278e19c3db35719ac8136f3dbb /net-print/cups/files/cups-1.4.8-CVE-2011-2896.patch | |
parent | Add security fix from portage (diff) | |
download | sattvik-0675585c50b904a808f5db83fc25f9dce6f6a7f9.tar.gz sattvik-0675585c50b904a808f5db83fc25f9dce6f6a7f9.tar.bz2 sattvik-0675585c50b904a808f5db83fc25f9dce6f6a7f9.zip |
Security updates
Diffstat (limited to 'net-print/cups/files/cups-1.4.8-CVE-2011-2896.patch')
-rw-r--r-- | net-print/cups/files/cups-1.4.8-CVE-2011-2896.patch | 37 |
1 files changed, 0 insertions, 37 deletions
diff --git a/net-print/cups/files/cups-1.4.8-CVE-2011-2896.patch b/net-print/cups/files/cups-1.4.8-CVE-2011-2896.patch deleted file mode 100644 index 843456f..0000000 --- a/net-print/cups/files/cups-1.4.8-CVE-2011-2896.patch +++ /dev/null @@ -1,37 +0,0 @@ -Source: Upstream http://cups.org/str.php?L3914 -Reason: Avoid GIF reader loop (CVE-2011-2896) -Upstream: Fixed in trunk - -diff -up cups-1.4.8/filter/image-gif.c.CVE-2011-2896 cups-1.4.8/filter/image-gif.c ---- cups-1.4.8/filter/image-gif.c.CVE-2011-2896 2011-06-20 21:37:51.000000000 +0100 -+++ cups-1.4.8/filter/image-gif.c 2011-08-19 11:33:37.547911212 +0100 -@@ -648,11 +648,13 @@ gif_read_lzw(FILE *fp, /* I - File to - - if (code == max_code) - { -- *sp++ = firstcode; -- code = oldcode; -+ if (sp < (stack + 8192)) -+ *sp++ = firstcode; -+ -+ code = oldcode; - } - -- while (code >= clear_code) -+ while (code >= clear_code && sp < (stack + 8192)) - { - *sp++ = table[1][code]; - if (code == table[0][code]) -@@ -661,8 +663,10 @@ gif_read_lzw(FILE *fp, /* I - File to - code = table[0][code]; - } - -- *sp++ = firstcode = table[1][code]; -- code = max_code; -+ if (sp < (stack + 8192)) -+ *sp++ = firstcode = table[1][code]; -+ -+ code = max_code; - - if (code < 4096) - { |