Mercurial Mercurial > upstream > oracle > userland-gate / file revision
summary | shortlog | changelog | graph | tags | bookmarks | branches | files | changeset | file | latest | revisions | annotate | diff | comparison | raw | help
Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
components/gd2/patches/004-gd2-2.0.35-CVE-2009-3546.patch
author zihao.zhu@oracle.com <zihao.zhu@oracle.com>
Tue, 18 Oct 2016 14:50:09 -0700
changeset 7123 b650e07ff9f6
parent 130 5e67396e42dc
permissions -rw-r--r--
24750381 python-ldap missing dependencies on pyasn1, pyasn1-modules

# Patch for libgd2 Version 2.0.35 CVE-2009-3546
--- gd_gd.c	2006-04-05 08:52:22.000000000 -0700
+++ gd_gd.c	2011-02-16 17:57:09.865711091 -0800
@@ -44,6 +44,10 @@
 	    {
 	      goto fail1;
 	    }
+	  if (im->colorsTotal > gdMaxColors)
+	    {
+		goto fail1;
+	    }
 	}
       /* Int to accommodate truecolor single-color transparency */
       if (!gdGetInt (&im->transparent, in))
upstream/oracle/userland-gate