summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/ghostscript/ghostscript/CVE-2017-7975.patch
diff options
context:
space:
mode:
Diffstat (limited to 'meta/recipes-extended/ghostscript/ghostscript/CVE-2017-7975.patch')
-rw-r--r--meta/recipes-extended/ghostscript/ghostscript/CVE-2017-7975.patch37
1 files changed, 0 insertions, 37 deletions
diff --git a/meta/recipes-extended/ghostscript/ghostscript/CVE-2017-7975.patch b/meta/recipes-extended/ghostscript/ghostscript/CVE-2017-7975.patch
deleted file mode 100644
index e406086e8f..0000000000
--- a/meta/recipes-extended/ghostscript/ghostscript/CVE-2017-7975.patch
+++ /dev/null
@@ -1,37 +0,0 @@
1From b39be1019b4acc1aa50c6026463c543332e95a31 Mon Sep 17 00:00:00 2001
2From: Catalin Enache <catalin.enache@windriver.com>
3Date: Mon, 8 May 2017 16:18:14 +0300
4
5Subject: [PATCH] Bug 697693: Prevent SEGV due to integer overflow.
6
7While building a Huffman table, the start and end points were susceptible
8to integer overflow.
9
10Thank you to Jiaqi for finding this issue and suggesting a patch.
11
12Upstream-Status: Backport
13CVE: CVE-2017-7975
14
15Signed-off-by: Catalin Enache <catalin.enache@windriver.com>
16
17Contents of this patch were extracted from a larger patch which addressed
18two CVE's. The context (location of {) was also modified to apply to
19ghostscript 9.21.
20
21Signed-off-by: Joe Slater <joe.slater@windriver.com>
22
23
24--- a/jbig2dec/jbig2_huffman.c
25+++ b/jbig2dec/jbig2_huffman.c
26@@ -421,8 +421,8 @@ jbig2_build_huffman_table(Jbig2Ctx *ctx,
27
28 if (PREFLEN == CURLEN) {
29 int RANGELEN = lines[CURTEMP].RANGELEN;
30- int start_j = CURCODE << shift;
31- int end_j = (CURCODE + 1) << shift;
32+ uint32_t start_j = CURCODE << shift;
33+ uint32_t end_j = (CURCODE + 1) << shift;
34 byte eflags = 0;
35
36 if (end_j > max_j) {
37