parent
6393c29125
commit
31105af4c4
@ -1,3 +1,4 @@
|
|||||||
/librevenge-0.0.0.tar.xz
|
/librevenge-0.0.0.tar.xz
|
||||||
/librevenge-0.0.1.tar.xz
|
/librevenge-0.0.1.tar.xz
|
||||||
/librevenge-0.0.2.tar.xz
|
/librevenge-0.0.2.tar.xz
|
||||||
|
/librevenge-0.0.3.tar.xz
|
||||||
|
@ -1,25 +0,0 @@
|
|||||||
From 111c0f374ae8f9c4d2183fb9e826d7084c85488f Mon Sep 17 00:00:00 2001
|
|
||||||
From: David Tardon <dtardon@redhat.com>
|
|
||||||
Date: Fri, 31 Jul 2015 17:58:29 +0200
|
|
||||||
Subject: [PATCH] rhbz#1248443 unbounded heap allocation
|
|
||||||
|
|
||||||
---
|
|
||||||
src/lib/RVNGOLEStream.cpp | 2 ++
|
|
||||||
1 file changed, 2 insertions(+)
|
|
||||||
|
|
||||||
diff --git a/src/lib/RVNGOLEStream.cpp b/src/lib/RVNGOLEStream.cpp
|
|
||||||
index 89055f7..c75b135 100644
|
|
||||||
--- a/src/lib/RVNGOLEStream.cpp
|
|
||||||
+++ b/src/lib/RVNGOLEStream.cpp
|
|
||||||
@@ -755,6 +755,8 @@ bool librevenge::Header::valid(const unsigned long fileSize)
|
|
||||||
if (m_threshold != 4096) return false;
|
|
||||||
// there must be at least the header, one bat sector and one dirent sector in the file
|
|
||||||
if ((fileSize / m_size_bbat) < 3) return false;
|
|
||||||
+ // sectors must fit into the file
|
|
||||||
+ if ((fileSize / m_size_bbat) < m_num_mbat) return false;
|
|
||||||
if (m_num_bat == 0) return false;
|
|
||||||
if ((m_num_bat > 109) && (m_num_bat > (m_num_mbat * (m_size_bbat/4-1)) + 109)) return false;
|
|
||||||
if ((m_num_bat < 109) && (m_num_mbat != 0)) return false;
|
|
||||||
--
|
|
||||||
2.1.0
|
|
||||||
|
|
Loading…
Reference in new issue