Gentoo Archives: gentoo-commits

From: "Pacho Ramos (pacho)" <pacho@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo-x86 commit in media-gfx/argyllcms/files: argyllcms-1.4.0-CVE-2012-4405.patch
Date: Sat, 01 Dec 2012 08:45:05
Message-Id: 20121201084455.88D7321667@flycatcher.gentoo.org
1 pacho 12/12/01 08:44:55
2
3 Added: argyllcms-1.4.0-CVE-2012-4405.patch
4 Log:
5 Fix CVE-2012-4405
6
7 (Portage version: 2.1.11.32/cvs/Linux x86_64, signed Manifest commit with key A188FBD4)
8
9 Revision Changes Path
10 1.1 media-gfx/argyllcms/files/argyllcms-1.4.0-CVE-2012-4405.patch
11
12 file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-gfx/argyllcms/files/argyllcms-1.4.0-CVE-2012-4405.patch?rev=1.1&view=markup
13 plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-gfx/argyllcms/files/argyllcms-1.4.0-CVE-2012-4405.patch?rev=1.1&content-type=text/plain
14
15 Index: argyllcms-1.4.0-CVE-2012-4405.patch
16 ===================================================================
17
18 https://bugzilla.redhat.com/show_bug.cgi?id=854227
19 https://bugzilla.redhat.com/attachment.cgi?id=609986
20
21 --- icc/icc.c 2012-04-19 09:36:49.000000000 +0200
22 +++ icc/icc.c.oden 2012-09-12 12:35:49.252519528 +0200
23 @@ -6065,6 +6065,11 @@ static int icmLut_read(
24 p->clutPoints = read_UInt8Number(bp+10);
25
26 /* Sanity check */
27 + if (p->inputChan < 1) {
28 + sprintf(icp->err,"icmLut_read: No input channels!");
29 + return icp->errc = 1;
30 + }
31 +
32 if (p->inputChan > MAX_CHAN) {
33 sprintf(icp->err,"icmLut_read: Can't handle > %d input channels\n",MAX_CHAN);
34 return icp->errc = 1;