diff options
author | James Meyer <james.meyer@operamail.com> | 2012-08-07 20:00:06 (GMT) |
---|---|---|
committer | James Meyer <james.meyer@operamail.com> | 2012-08-07 20:00:06 (GMT) |
commit | 3229cda8b498a06d720e54d8b0d197ff0d28ce10 (patch) | |
tree | b42fdb2704b1ab7b1d59cf09456f5bb70ff2232e /abs/extra/libwmf/libwmf-0.2.8.4-useafterfree.patch | |
parent | 784f5ed4cd5ea961fc6ccf6b7d65fba26851c056 (diff) | |
download | linhes_pkgbuild-3229cda8b498a06d720e54d8b0d197ff0d28ce10.zip linhes_pkgbuild-3229cda8b498a06d720e54d8b0d197ff0d28ce10.tar.gz linhes_pkgbuild-3229cda8b498a06d720e54d8b0d197ff0d28ce10.tar.bz2 |
libwmf .2.8.4
Diffstat (limited to 'abs/extra/libwmf/libwmf-0.2.8.4-useafterfree.patch')
-rw-r--r-- | abs/extra/libwmf/libwmf-0.2.8.4-useafterfree.patch | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/abs/extra/libwmf/libwmf-0.2.8.4-useafterfree.patch b/abs/extra/libwmf/libwmf-0.2.8.4-useafterfree.patch new file mode 100644 index 0000000..328c541 --- /dev/null +++ b/abs/extra/libwmf/libwmf-0.2.8.4-useafterfree.patch @@ -0,0 +1,10 @@ +--- libwmf-0.2.8.4/src/extra/gd/gd_clip.c.CVE-2009-1364-im-clip-list 2009-04-24 04:06:44.000000000 -0400 ++++ libwmf-0.2.8.4/src/extra/gd/gd_clip.c 2009-04-24 04:08:30.000000000 -0400 +@@ -70,6 +70,7 @@ void gdClipSetAdd(gdImagePtr im,gdClipRe + { more = gdRealloc (im->clip->list,(im->clip->max + 8) * sizeof (gdClipRectangle)); + if (more == 0) return; + im->clip->max += 8; ++ im->clip->list = more; + } + im->clip->list[im->clip->count] = (*rect); + im->clip->count++; |