public inbox for gentoo-commits@lists.gentoo.org
 help / color / mirror / Atom feed
* [gentoo-commits] gentoo-x86 commit in sci-astronomy/ds9/files: ds9-5.1-tk-gif.patch ds9-5.0-Makefile.patch
@ 2008-02-14 23:32 Sebastien Fabbro (bicatali)
  0 siblings, 0 replies; only message in thread
From: Sebastien Fabbro (bicatali) @ 2008-02-14 23:32 UTC (permalink / raw
  To: gentoo-commits

bicatali    08/02/14 23:32:17

  Added:                ds9-5.1-tk-gif.patch
  Removed:              ds9-5.0-Makefile.patch
  Log:
  Fixed security bug in internal copy to tk (bug #208464), removed older affected version.
  (Portage version: 2.1.4.3)

Revision  Changes    Path
1.1                  sci-astronomy/ds9/files/ds9-5.1-tk-gif.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/sci-astronomy/ds9/files/ds9-5.1-tk-gif.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/sci-astronomy/ds9/files/ds9-5.1-tk-gif.patch?rev=1.1&content-type=text/plain

Index: ds9-5.1-tk-gif.patch
===================================================================
--- tk8.4.17/generic/tkImgGIF.c.orig	2008-02-14 23:20:53.683962654 +0000
+++ tk8.4.17/generic/tkImgGIF.c	2008-02-14 23:21:42.762759495 +0000
@@ -826,6 +826,12 @@
 		Tcl_PosixError(interp), (char *) NULL);
 	return TCL_ERROR;
     }
+
+    if (initialCodeSize > MAX_LWZ_BITS) {
+	Tcl_SetResult(interp, "malformed image", TCL_STATIC);
+	return TCL_ERROR;
+    }
+
     if (transparent != -1) {
 	cmap[transparent][CM_RED] = 0;
 	cmap[transparent][CM_GREEN] = 0;



-- 
gentoo-commits@lists.gentoo.org mailing list



^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2008-02-14 23:32 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-02-14 23:32 [gentoo-commits] gentoo-x86 commit in sci-astronomy/ds9/files: ds9-5.1-tk-gif.patch ds9-5.0-Makefile.patch Sebastien Fabbro (bicatali)

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox