openbsd-ports/graphics/netpbm/patches/patch-pbm_pm_h
brad 73a9fe0066 Several math overflow errors were found in NetPBM by Al Viro and Alan
Cox.  While these programs are not installed suid root, they are often
used to prepare data for processing.  These errors may permit remote
attackers to cause a denial of service or execute arbitrary code in
any programs or scripts that use these graphics conversion tools.

http://marc.theaimsgroup.com/?l=bugtraq&m=104644687816522&w=2
2003-03-29 04:13:54 +00:00

16 lines
582 B
Plaintext

$OpenBSD: patch-pbm_pm_h,v 1.1 2003/03/29 04:13:54 brad Exp $
--- pbm/pm.h.orig Thu Jan 3 15:35:23 2002
+++ pbm/pm.h Fri Mar 28 20:22:07 2003
@@ -217,6 +217,11 @@ pm_check(FILE * const file, const enum p
const unsigned int need_raster_size,
enum pm_check_code * const retval_p);
+void *malloc2(int, int);
+void *malloc3(int, int, int);
+void overflow2(int, int);
+void overflow3(int, int, int);
+void overflow_add(int, int);
/* By making this <> instead of "", we avoid making shhopt.h a dependency
of every program in the package when we do make dep.