73a9fe0066
Cox. While these programs are not installed suid root, they are often used to prepare data for processing. These errors may permit remote attackers to cause a denial of service or execute arbitrary code in any programs or scripts that use these graphics conversion tools. http://marc.theaimsgroup.com/?l=bugtraq&m=104644687816522&w=2
14 lines
680 B
Plaintext
14 lines
680 B
Plaintext
$OpenBSD: patch-pbm_pktopbm_c,v 1.1 2003/03/29 04:13:54 brad Exp $
|
|
--- pbm/pktopbm.c.orig Thu Jan 25 22:42:30 2001
|
|
+++ pbm/pktopbm.c Fri Mar 28 20:22:07 2003
|
|
@@ -255,7 +255,8 @@ main(argc, argv)
|
|
if (turnon) flagbyte &= 7 ; /* long or short form */
|
|
if (flagbyte == 7) { /* long form preamble */
|
|
integer packetlength = get32() ; /* character packet length */
|
|
- car = get32() ; /* character number */
|
|
+ car = get32() ; /* character number */
|
|
+ overflow_add(packetlength, pktopbm_pkloc);
|
|
endofpacket = packetlength + pktopbm_pkloc ; /* calculate end of packet */
|
|
if ((car >= MAXPKCHAR) || !filename[car]) {
|
|
ignorechar(car, endofpacket);
|