0dde427829
- Buffer overflow when pasting too long text from clipboard to dialog boxes (not remotely exploitable) - A write out of allocated memory in the graphics renderer (potentially exploitable) - An infinite loop when parsing invalid usemap specification in text and graphics mode (can cause browser lockup, but not otherwise exploitable) - Accesses out of memory in the xbm decoder (potentially exploitable) Also drop dip.c patch to resolve crashes with libpng 1.5, upstream appears to have fixed this separately in the update to 2.5. Thanks jasper@ for additional testing.
12 lines
424 B
Plaintext
12 lines
424 B
Plaintext
$OpenBSD: patch-html_c,v 1.12 2012/04/10 11:59:44 sthen Exp $
|
|
--- html.c.orig Wed Apr 4 22:27:07 2012
|
|
+++ html.c Tue Apr 10 11:55:43 2012
|
|
@@ -957,6 +957,7 @@ static void html_a(unsigned char *a)
|
|
format.target = stracpy(format.target_base);
|
|
}
|
|
/*format.attr ^= AT_BOLD;*/
|
|
+ format.attr |= AT_UNDERLINE;
|
|
set_link_attr();
|
|
} else if (!ev) kill_html_stack_item(&html_top);
|
|
if ((al = get_attr_val(a, "name"))) {
|