summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/ghostscript/ghostscript/CVE-2016-8602.patch
diff options
context:
space:
mode:
Diffstat (limited to 'meta/recipes-extended/ghostscript/ghostscript/CVE-2016-8602.patch')
-rw-r--r--meta/recipes-extended/ghostscript/ghostscript/CVE-2016-8602.patch47
1 files changed, 47 insertions, 0 deletions
diff --git a/meta/recipes-extended/ghostscript/ghostscript/CVE-2016-8602.patch b/meta/recipes-extended/ghostscript/ghostscript/CVE-2016-8602.patch
new file mode 100644
index 0000000000..e58567cfec
--- /dev/null
+++ b/meta/recipes-extended/ghostscript/ghostscript/CVE-2016-8602.patch
@@ -0,0 +1,47 @@
1From f5c7555c30393e64ec1f5ab0dfae5b55b3b3fc78 Mon Sep 17 00:00:00 2001
2From: Chris Liddell <chris.liddell@artifex.com>
3Date: Sat, 8 Oct 2016 16:10:27 +0100
4Subject: [PATCH] Bug 697203: check for sufficient params in .sethalftone5
5
6and param types
7
8Upstream-Status: Backport
9CVE: CVE-2016-8602
10
11Signed-off-by: Catalin Enache <catalin.enache@windriver.com>
12---
13 psi/zht2.c | 12 ++++++++++--
14 1 file changed, 10 insertions(+), 2 deletions(-)
15
16diff --git a/psi/zht2.c b/psi/zht2.c
17index fb4a264..dfa27a4 100644
18--- a/psi/zht2.c
19+++ b/psi/zht2.c
20@@ -82,14 +82,22 @@ zsethalftone5(i_ctx_t *i_ctx_p)
21 gs_memory_t *mem;
22 uint edepth = ref_stack_count(&e_stack);
23 int npop = 2;
24- int dict_enum = dict_first(op);
25+ int dict_enum;
26 ref rvalue[2];
27 int cname, colorant_number;
28 byte * pname;
29 uint name_size;
30 int halftonetype, type = 0;
31 gs_gstate *pgs = igs;
32- int space_index = r_space_index(op - 1);
33+ int space_index;
34+
35+ if (ref_stack_count(&o_stack) < 2)
36+ return_error(gs_error_stackunderflow);
37+ check_type(*op, t_dictionary);
38+ check_type(*(op - 1), t_dictionary);
39+
40+ dict_enum = dict_first(op);
41+ space_index = r_space_index(op - 1);
42
43 mem = (gs_memory_t *) idmemory->spaces_indexed[space_index];
44
45--
462.10.2
47