rpms
/
imlib2
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

patch for CVE-2008-5187

This commit is contained in:
Tomas Smetana 2008-11-23 10:19:15 +00:00
parent f9baf611a9
commit 51c943e32d
2 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
imlib2-1.4.2-cve-2008-5187 Normal file
View File

@ -0,0 +1,13 @@
diff -up imlib2-1.4.2/src/modules/loaders/loader_xpm.c.cve-2008-5187 imlib2-1.4.2/src/modules/loaders/loader_xpm.c
--- imlib2-1.4.2/src/modules/loaders/loader_xpm.c.cve-2008-5187 2008-11-23 11:10:05.000000000 +0100
+++ imlib2-1.4.2/src/modules/loaders/loader_xpm.c 2008-11-23 11:10:38.000000000 +0100
@@ -253,8 +253,8 @@ load(ImlibImage * im, ImlibProgressFunct
return 0;
}
ptr = im->data;
- end = ptr + (sizeof(DATA32) * w * h);
pixels = w * h;
+ end = ptr + pixels;
}
else
{

7
imlib2.spec
View File

@ -1,13 +1,14 @@
Summary: Image loading, saving, rendering, and manipulation library
Name: imlib2
Version: 1.4.2
Release: 1%{?dist}
Release: 2%{?dist}
License: Imlib2
Group: System Environment/Libraries
URL: http://docs.enlightenment.org/api/imlib2/html/
Source0: http://downloads.sourceforge.net/enlightenment/%{name}-%{version}.tar.bz2
# Fedora specific multilib hack, upstream should switch to pkgconfig one day
Patch0: imlib2-1.3.0-multilib.patch
Patch1: imlib2-1.4.2-cve-2008-5187
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildRequires: libjpeg-devel libpng-devel libtiff-devel
BuildRequires: giflib-devel freetype-devel >= 2.1.9-4 libtool bzip2-devel
@ -57,6 +58,7 @@ conditions of the GPL version 2 (or at your option) any later version.
%prep
%setup -q
%patch0 -p1 -b .multilib
%patch1 -p1 -b .cve-2008-5187
%build
@ -121,6 +123,9 @@ rm -rf $RPM_BUILD_ROOT
%changelog
* Sun Nov 23 2008 Tomas Smetana <tsmetana@redhat.com> 1.4.2-2
- patch for CVE-2008-5187
* Tue Oct 21 2008 Tomas Smetana <tsmetana@redhat.com> 1.4.2-1
- new upstream version 1.4.2