roll in a distribution patch which fix a stack-based buffer overflow

http://secunia.com/advisories/25012/

ok naddy@
This commit is contained in:
rui 2007-05-23 21:15:22 +00:00
parent 9430684f34
commit 10f8d65953
2 changed files with 14 additions and 1 deletions

View File

@ -1,8 +1,9 @@
# $OpenBSD: Makefile,v 1.22 2007/05/10 19:29:32 alek Exp $
# $OpenBSD: Makefile,v 1.23 2007/05/23 21:15:22 rui Exp $
COMMENT= "GNU Image Manipulation Program"
DISTNAME= gimp-2.2.14
PKGNAME= ${DISTNAME}p0
SHARED_LIBS= gimp-2.0 200.14 \
gimpbase-2.0 200.14 \
gimpcolor-2.0 200.14 \

View File

@ -0,0 +1,12 @@
$OpenBSD: patch-plug-ins_common_sunras_c,v 1.1 2007/05/23 21:15:22 rui Exp $
--- plug-ins/common/sunras.c.orig Wed May 23 21:54:14 2007
+++ plug-ins/common/sunras.c Wed May 23 21:55:05 2007
@@ -873,7 +873,7 @@ set_color_table (gint32 image_ID,
ncols = sunhdr->l_ras_maplength / 3;
if (ncols <= 0) return;
- for (j = 0; j < ncols; j++)
+ for (j = 0; j < MIN (ncols, 256); j++)
{
ColorMap[j*3] = suncolmap[j];
ColorMap[j*3+1] = suncolmap[j+ncols];