From: | "Pacho Ramos (pacho)" <pacho@g.o> |
---|---|
To: | gentoo-commits@l.g.o |
Subject: | [gentoo-commits] gentoo-x86 commit in media-gfx/argyllcms/files: argyllcms-1.4.0-CVE-2012-4405.patch |
Date: | Sat, 01 Dec 2012 08:45:05 |
Message-Id: | 20121201084455.88D7321667@flycatcher.gentoo.org |
1 | pacho 12/12/01 08:44:55 |
2 | |
3 | Added: argyllcms-1.4.0-CVE-2012-4405.patch |
4 | Log: |
5 | Fix CVE-2012-4405 |
6 | |
7 | (Portage version: 2.1.11.32/cvs/Linux x86_64, signed Manifest commit with key A188FBD4) |
8 | |
9 | Revision Changes Path |
10 | 1.1 media-gfx/argyllcms/files/argyllcms-1.4.0-CVE-2012-4405.patch |
11 | |
12 | file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-gfx/argyllcms/files/argyllcms-1.4.0-CVE-2012-4405.patch?rev=1.1&view=markup |
13 | plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-gfx/argyllcms/files/argyllcms-1.4.0-CVE-2012-4405.patch?rev=1.1&content-type=text/plain |
14 | |
15 | Index: argyllcms-1.4.0-CVE-2012-4405.patch |
16 | =================================================================== |
17 | |
18 | https://bugzilla.redhat.com/show_bug.cgi?id=854227 |
19 | https://bugzilla.redhat.com/attachment.cgi?id=609986 |
20 | |
21 | --- icc/icc.c 2012-04-19 09:36:49.000000000 +0200 |
22 | +++ icc/icc.c.oden 2012-09-12 12:35:49.252519528 +0200 |
23 | @@ -6065,6 +6065,11 @@ static int icmLut_read( |
24 | p->clutPoints = read_UInt8Number(bp+10); |
25 | |
26 | /* Sanity check */ |
27 | + if (p->inputChan < 1) { |
28 | + sprintf(icp->err,"icmLut_read: No input channels!"); |
29 | + return icp->errc = 1; |
30 | + } |
31 | + |
32 | if (p->inputChan > MAX_CHAN) { |
33 | sprintf(icp->err,"icmLut_read: Can't handle > %d input channels\n",MAX_CHAN); |
34 | return icp->errc = 1; |