cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix embedded xpdf vulnerability. Bump PORTREVISION.

Browse Source 
Approved by:	asa@agava.com (maintainer, timeout 3 weeks), linimon
Obtained from:	RedHat/FC3
Security:	http://www.FreeBSD.org/ports/portaudit/24eee285-09c7-11da-bc08-0001020eed82.html
Security:	CAN-2005-2097
This commit is contained in:
Sam Lawrance 2005-09-06 08:19:02 +00:00
parent ea45076eaa
commit 8c7b5e4f7f
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=142064
2 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
print/cups-base/Makefile
View File

@ -9,7 +9,7 @@
PORTNAME= cups-base
PORTVERSION= ${CUPS_PORTVER}
PORTREVISION= 4
PORTREVISION= 5
PORTEPOCH= ${CUPS_PORTEPOCH}
CATEGORIES= print
MASTER_SITES= ${CUPS_MASTER_SITES}

12
print/cups-base/files/patch-CAN-2005-2097 Normal file
View File

@ -0,0 +1,12 @@
--- pdftops/FontFile.cxx.orig Tue Feb 3 09:41:09 2004
+++ pdftops/FontFile.cxx Tue Sep 6 16:16:04 2005
@@ -3572,6 +3573,9 @@
} else {
origLocaTable[i].pos = 2 * getUShort(pos + 2*i);
}
+
+ if (origLocaTable[i].pos < 0 || origLocaTable[i].pos > len)
+ error(1, 0, "bad loca table pos value");
}
qsort(origLocaTable, nGlyphs + 1, sizeof(TrueTypeLoca), &cmpTrueTypeLocaPos);
for (i = 0; i < nGlyphs; ++i) {