- Fix security issue

PR:		ports/121283
Security:	CVE-2008-0411
Submitted by:	bf <bf2006a at yahoo.com>

1 files changed, 12 insertions, 0 deletions

diff --git a/print/ghostscript-gpl/files/patch-src__zicc.c b/print/ghostscript-gpl/files/patch-src__zicc.c
new file mode 100644
index 000000000000..a5ddf3a4ff0d
--- /dev/null
+++ b/print/ghostscript-gpl/files/patch-src__zicc.c
@@ -0,0 +1,12 @@
+--- src/zicc.c
++++ src/zicc.c	2008-02-05 16:11:59.000000000 +0000
+@@ -77,6 +77,9 @@ zseticcspace(i_ctx_t * i_ctx_p)
+     dict_find_string(op, "N", &pnval);
+     ncomps = pnval->value.intval;
+ 
++    if (2*ncomps > sizeof(range_buff)/sizeof(float))
++	return_error(e_rangecheck);
++
+     /* verify the DataSource entry */
+     if (dict_find_string(op, "DataSource", &pstrmval) <= 0)
+         return_error(e_undefined);