summaryrefslogtreecommitdiff
path: root/comms
diff options
context:
space:
mode:
authorJean-Marc Zucconi <jmz@FreeBSD.org>2000-08-25 21:07:42 +0000
committerJean-Marc Zucconi <jmz@FreeBSD.org>2000-08-25 21:07:42 +0000
commitfaa9578ebb7a7223227b0937db962f7e975a72ac (patch)
treec42e507ba0f4cb04f889bd7f428368e88473db4b /comms
parentTypo (X11_BASE -> X11BASE). (diff)
Fix a buffer overrun for some incorrect input files.
Submitted by: Paul Eggert <eggert@twinsun.com>
Notes
Notes: svn path=/head/; revision=31980
Diffstat (limited to 'comms')
-rw-r--r--comms/viewfax/files/patch-aa12
1 files changed, 12 insertions, 0 deletions
diff --git a/comms/viewfax/files/patch-aa b/comms/viewfax/files/patch-aa
new file mode 100644
index 000000000000..844595ffa52d
--- /dev/null
+++ b/comms/viewfax/files/patch-aa
@@ -0,0 +1,12 @@
+--- viewfax.c 1996/11/13 21:46:44 2.4
++++ viewfax.c 2000/08/25 19:51:10 2.4.0.1
+@@ -294,6 +294,9 @@ drawline(pixnum *run, int LineNum, struc
+ while (tot < pn->width) {
+ n = *r++;
+ tot += n;
++ /* Watch out for buffer overruns, e.g. when n == 65535. */
++ if (tot > pn->width)
++ break;
+ if (pix)
+ acc |= (~(t32bits)0 >> nacc);
+ else if (nacc)