[gentoo-commits] gentoo-x86 commit in media-libs/imlib2/files: imlib2-1.4.2-CVE-2008-5187.patch

[Mike Frysinger (vapier)]

vapier      08/11/27 19:38:49

  Added:                imlib2-1.4.2-CVE-2008-5187.patch
  Log:
  Fix from upstream for CVE-2008-5187 #248057.
  (Portage version: 2.2_rc16/cvs/Linux 2.6.27.4 x86_64)

Revision  Changes    Path
1.1                  media-libs/imlib2/files/imlib2-1.4.2-CVE-2008-5187.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-libs/imlib2/files/imlib2-1.4.2-CVE-2008-5187.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-libs/imlib2/files/imlib2-1.4.2-CVE-2008-5187.patch?rev=1.1&content-type=text/plain

Index: imlib2-1.4.2-CVE-2008-5187.patch
===================================================================
http://bugs.gentoo.org/248057

Index: src/modules/loaders/loader_xpm.c
===================================================================
--- src/modules/loaders/loader_xpm.c	(revision 37743)
+++ src/modules/loaders/loader_xpm.c	(revision 37744)
@@ -253,8 +253,8 @@ load(ImlibImage * im, ImlibProgressFunct
                                  return 0;
                               }
                             ptr = im->data;
-                            end = ptr + (sizeof(DATA32) * w * h);
                             pixels = w * h;
+                            end = ptr + (pixels);
                          }
                        else
                          {