From 3a29d83d78af4c580d02bae6ae7a81127005a8b6 Mon Sep 17 00:00:00 2001
From: Tor Andersson <tor.andersson@artifex.com>
Date: Wed, 21 Sep 2016 15:22:08 +0200
Subject: Check for buffer overflow in strtod ascii division.

---
 source/fitz/strtod.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/source/fitz/strtod.c b/source/fitz/strtod.c
index 4f0675fe..35ddd6ed 100644
--- a/source/fitz/strtod.c
+++ b/source/fitz/strtod.c
@@ -429,6 +429,7 @@ xx:
 		n -= c<<b;
 		*p++ = c + '0';
 		(*na)++;
+		if (*na >= Ndig) break; /* abort if overflowing */
 	}
 	*p = 0;
 }
-- 
cgit v1.2.3