73a9fe0066
Cox. While these programs are not installed suid root, they are often used to prepare data for processing. These errors may permit remote attackers to cause a denial of service or execute arbitrary code in any programs or scripts that use these graphics conversion tools. http://marc.theaimsgroup.com/?l=bugtraq&m=104644687816522&w=2
12 lines
461 B
Plaintext
12 lines
461 B
Plaintext
$OpenBSD: patch-pbm_pbmtogem_c,v 1.1 2003/03/29 04:13:54 brad Exp $
|
|
--- pbm/pbmtogem.c.orig Fri Jun 9 03:07:05 2000
|
|
+++ pbm/pbmtogem.c Fri Mar 28 20:22:06 2003
|
|
@@ -123,6 +123,7 @@ putinit (rows, cols)
|
|
bitsperitem = 0;
|
|
bitshift = 7;
|
|
outcol = 0;
|
|
+ overflow_add(cols, 7);
|
|
outmax = (cols + 7) / 8;
|
|
outrow = (unsigned char *) pm_allocrow (outmax, sizeof (unsigned char));
|
|
lastrow = (unsigned char *) pm_allocrow (outmax, sizeof (unsigned char));
|