cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix yet another buffer overflow in imported xpdf sources.

Browse Source 
References:

http://www.koffice.org/security/advisory-20050120-1.txt

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0064
http://www.idefense.com/application/poi/display?id=186&type=vulnerabilities
This commit is contained in:
Michael Nottebrock 2005-01-20 23:22:58 +00:00
parent 9908d0064a
commit c610981731
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=126981
6 changed files with 48 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
editors/calligra/Makefile
View File

@ -8,7 +8,7 @@
PORTNAME= koffice
PORTVERSION= 1.3.5
PORTREVISION= 1
PORTREVISION= 2
PORTEPOCH= 1
CATEGORIES= editors kde
MASTER_SITES= ${MASTER_SITE_KDE}

15
editors/calligra/files/patch-post-1.3.5-koffice.diff Normal file
View File

@ -0,0 +1,15 @@
--- filters/kword/pdf/xpdf/xpdf/XRef.cc 30 Oct 2004 16:35:33 -0000 1.6
+++ filters/kword/pdf/xpdf/xpdf/XRef.cc 20 Jan 2005 17:36:38 -0000 1.8
@@ -501,6 +501,12 @@ GBool XRef::checkEncrypted(GString *owne
} else {
keyLength = 5;
}
+ if (keyLength < 1) {
+ keyLength = 1;
+ }
+ if (keyLength > 16) {
+ keyLength = 16;
+ }
permFlags = permissions.getInt();
if (encVersion >= 1 && encVersion <= 2 &&
encRevision >= 2 && encRevision <= 3) {

2
editors/koffice-kde3/Makefile
View File

@ -8,7 +8,7 @@
PORTNAME= koffice
PORTVERSION= 1.3.5
PORTREVISION= 1
PORTREVISION= 2
PORTEPOCH= 1
CATEGORIES= editors kde
MASTER_SITES= ${MASTER_SITE_KDE}

15
editors/koffice-kde3/files/patch-post-1.3.5-koffice.diff Normal file
View File

@ -0,0 +1,15 @@
--- filters/kword/pdf/xpdf/xpdf/XRef.cc 30 Oct 2004 16:35:33 -0000 1.6
+++ filters/kword/pdf/xpdf/xpdf/XRef.cc 20 Jan 2005 17:36:38 -0000 1.8
@@ -501,6 +501,12 @@ GBool XRef::checkEncrypted(GString *owne
} else {
keyLength = 5;
}
+ if (keyLength < 1) {
+ keyLength = 1;
+ }
+ if (keyLength > 16) {
+ keyLength = 16;
+ }
permFlags = permissions.getInt();
if (encVersion >= 1 && encVersion <= 2 &&
encRevision >= 2 && encRevision <= 3) {

2
editors/koffice-kde4/Makefile
View File

@ -8,7 +8,7 @@
PORTNAME= koffice
PORTVERSION= 1.3.5
PORTREVISION= 1
PORTREVISION= 2
PORTEPOCH= 1
CATEGORIES= editors kde
MASTER_SITES= ${MASTER_SITE_KDE}

15
editors/koffice-kde4/files/patch-post-1.3.5-koffice.diff Normal file
View File

@ -0,0 +1,15 @@
--- filters/kword/pdf/xpdf/xpdf/XRef.cc 30 Oct 2004 16:35:33 -0000 1.6
+++ filters/kword/pdf/xpdf/xpdf/XRef.cc 20 Jan 2005 17:36:38 -0000 1.8
@@ -501,6 +501,12 @@ GBool XRef::checkEncrypted(GString *owne
} else {
keyLength = 5;
}
+ if (keyLength < 1) {
+ keyLength = 1;
+ }
+ if (keyLength > 16) {
+ keyLength = 16;
+ }
permFlags = permissions.getInt();
if (encVersion >= 1 && encVersion <= 2 &&
encRevision >= 2 && encRevision <= 3) {