73a9fe0066
Cox. While these programs are not installed suid root, they are often used to prepare data for processing. These errors may permit remote attackers to cause a denial of service or execute arbitrary code in any programs or scripts that use these graphics conversion tools. http://marc.theaimsgroup.com/?l=bugtraq&m=104644687816522&w=2
16 lines
586 B
Plaintext
16 lines
586 B
Plaintext
$OpenBSD: patch-pbm_pbmtoascii_c,v 1.1 2003/03/29 04:13:54 brad Exp $
|
|
--- pbm/pbmtoascii.c.orig Sat Mar 25 17:23:05 2000
|
|
+++ pbm/pbmtoascii.c Fri Mar 28 20:22:06 2003
|
|
@@ -115,9 +115,11 @@ char* argv[];
|
|
pm_usage( usage );
|
|
|
|
pbm_readpbminit( ifp, &cols, &rows, &format );
|
|
+ overflow_add(cols, gridx);
|
|
ccols = ( cols + gridx - 1 ) / gridx;
|
|
bitrow = pbm_allocrow( cols );
|
|
sig = (int*) pm_allocrow( ccols, sizeof(int) );
|
|
+ overflow_add(ccols, 1);
|
|
line = (char*) pm_allocrow( ccols + 1, sizeof(char) );
|
|
|
|
for ( row = 0; row < rows; row += gridy )
|