diff options
| author | Yen-Ming Lee <leeym@FreeBSD.org> | 2014-12-11 16:59:28 +0000 |
|---|---|---|
| committer | Yen-Ming Lee <leeym@FreeBSD.org> | 2014-12-11 16:59:28 +0000 |
| commit | 02508190e44cf9334e41b7a1bf1b21bd0b80ed4f (patch) | |
| tree | b37869065e7990d60df65fe039d87213ec1c8d61 /textproc/antiword/files/patch-wordole.c | |
| parent | Turn on XPS support by default. (diff) | |
- add patch to prevent buffer overflow
- bump PORTREVISION
PR: 195558
Submitted by: fk@fabiankeil.de
Diffstat (limited to 'textproc/antiword/files/patch-wordole.c')
| -rw-r--r-- | textproc/antiword/files/patch-wordole.c | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/textproc/antiword/files/patch-wordole.c b/textproc/antiword/files/patch-wordole.c new file mode 100644 index 000000000000..f3ecae43ba92 --- /dev/null +++ b/textproc/antiword/files/patch-wordole.c @@ -0,0 +1,14 @@ +--- wordole.c ++++ wordole.c +@@ -259,6 +259,11 @@ bGetPPS(FILE *pFile, + } + tNameSize = (size_t)usGetWord(0x40, aucBytes); + tNameSize = (tNameSize + 1) / 2; ++ if (tNameSize >= sizeof(atPPSlist[0].szName)) { ++ werr(0, "PPS %d appears to be invalid.", iIndex); ++ atPPSlist = xfree(atPPSlist); ++ return FALSE; ++ } + vName2String(atPPSlist[iIndex].szName, aucBytes, tNameSize); + atPPSlist[iIndex].ucType = ucGetByte(0x42, aucBytes); + if (atPPSlist[iIndex].ucType == 5) { |