[gentoo-commits] gentoo-x86 commit in net-libs/webkit-gtk/files: webkit-gtk-CVE-2009-0945.patch

[Nirbheek Chauhan (nirbheek)]

nirbheek    09/06/27 11:34:54

  Added:                webkit-gtk-CVE-2009-0945.patch
  Log:
  Fix bug 271861 (Array indexing vulnerability (CVE-2009-0945))
  (Portage version: 2.2_rc33/cvs/Linux i686)

Revision  Changes    Path
1.1                  net-libs/webkit-gtk/files/webkit-gtk-CVE-2009-0945.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-libs/webkit-gtk/files/webkit-gtk-CVE-2009-0945.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-libs/webkit-gtk/files/webkit-gtk-CVE-2009-0945.patch?rev=1.1&content-type=text/plain

Index: webkit-gtk-CVE-2009-0945.patch
===================================================================
Patch against Webkit-0 for CVE-2009-0945, bug 271861.

diff -ru a/WebKit-r40220/WebCore/svg/SVGList.h b/WebKit-r40220/WebCore/svg/SVGList.h
--- a/WebKit-r40220/WebCore/svg/SVGList.h	2009-01-21 06:14:24.000000000 +0100
+++ b/WebKit-r40220/WebCore/svg/SVGList.h	2009-06-27 01:47:15.000000000 +0200
@@ -96,7 +96,11 @@
 
         Item insertItemBefore(Item newItem, unsigned int index, ExceptionCode&)
         {
-            m_vector.insert(index, newItem);
+            if (index < m_vector.size()) {
+                m_vector.insert(index, newItem);
+            } else {
+                m_vector.append(newItem);
+            }
             return newItem;
         }