1 The patch has been taken from community and fixes Integer overflow.

     2 The details can be found in the following location

     3 https://bugs.ghostscript.com/show_bug.cgi?id=697190

     4 

     5 --- ghostscript-9.20/psi/zdscpars.c	2016-09-26 03:41:29.000000000 -0700

     6 +++ ghostscript-9.20/psi/zdscpars.c	2016-11-23 21:29:07.736373458 -0800

     7 @@ -150,11 +150,16 @@

     8      ref local_ref;

     9      int code;

    10      os_ptr const op = osp;

    11 -    dict * const pdict = op->value.pdict;

    12 -    gs_memory_t * const mem = (gs_memory_t *)dict_memory(pdict);

    13 -    dsc_data_t * const data =

    14 -        gs_alloc_struct(mem, dsc_data_t, &st_dsc_data_t, "DSC parser init");

    15 +    dict *pdict;

    16 +    gs_memory_t *mem;

    17 +    dsc_data_t *data;

    18  

    19 +    check_read_type(*op, t_dictionary);

    20 +

    21 +    pdict = op->value.pdict;

    22 +    mem = (gs_memory_t *)dict_memory(pdict);

    23 +

    24 +    data = gs_alloc_struct(mem, dsc_data_t, &st_dsc_data_t, "DSC parser init");

    25      if (!data)

    26          return_error(gs_error_VMerror);

    27      data->document_level = 0;