diff options
| author | Michael Nottebrock <lofi@FreeBSD.org> | 2007-07-30 21:59:27 +0000 |
|---|---|---|
| committer | Michael Nottebrock <lofi@FreeBSD.org> | 2007-07-30 21:59:27 +0000 |
| commit | b09d5e70f1f2527131f46d6332cfd7e34ef6bfdf (patch) | |
| tree | 50536d036a6e38df7489852614b93358e418a2f7 /graphics/kdegraphics4 | |
| parent | Fix various format string vulnerabilities in Qt3 and Qt4. (diff) | |
Fix buffer overflow vulnerability in xpdf code.
Security: http://www.kde.org/info/security/advisory-20070730-1.txt
Security: CVE-2007-3387
Notes
Notes:
svn path=/head/; revision=196764
Diffstat (limited to 'graphics/kdegraphics4')
| -rw-r--r-- | graphics/kdegraphics4/Makefile | 1 | ||||
| -rw-r--r-- | graphics/kdegraphics4/files/patch-post-3.5.7-kdegraphics-CVE-2007-3387.diff | 17 |
2 files changed, 18 insertions, 0 deletions
diff --git a/graphics/kdegraphics4/Makefile b/graphics/kdegraphics4/Makefile index abe09d60e488..e316a72b0b35 100644 --- a/graphics/kdegraphics4/Makefile +++ b/graphics/kdegraphics4/Makefile @@ -8,6 +8,7 @@ PORTNAME= kdegraphics PORTVERSION= ${KDE_VERSION} +PORTREVISION= 1 CATEGORIES= graphics kde MASTER_SITES= ${MASTER_SITE_KDE} MASTER_SITE_SUBDIR= stable/${PORTVERSION:S/.0//}/src diff --git a/graphics/kdegraphics4/files/patch-post-3.5.7-kdegraphics-CVE-2007-3387.diff b/graphics/kdegraphics4/files/patch-post-3.5.7-kdegraphics-CVE-2007-3387.diff new file mode 100644 index 000000000000..e28add87e275 --- /dev/null +++ b/graphics/kdegraphics4/files/patch-post-3.5.7-kdegraphics-CVE-2007-3387.diff @@ -0,0 +1,17 @@ +Index: kpdf/xpdf/xpdf/Stream.cc +=================================================================== +--- kpdf/xpdf/xpdf/Stream.cc (revision 689574) ++++ kpdf/xpdf/xpdf/Stream.cc (working copy) +@@ -411,9 +411,9 @@ StreamPredictor::StreamPredictor(Stream + + nVals = width * nComps; + if (width <= 0 || nComps <= 0 || nBits <= 0 || +- nComps >= INT_MAX / nBits || +- width >= INT_MAX / nComps / nBits || +- nVals * nBits + 7 < 0) { ++ nComps > gfxColorMaxComps || nBits > 16 || ++ width >= INT_MAX / nComps || ++ nVals >= (INT_MAX - 7) / nBits) { + return; + } + pixBytes = (nComps * nBits + 7) >> 3; |