diff options
Diffstat (limited to 'third_party/lcms2-2.6/0018-verify-size-before-reading.patch')
-rw-r--r-- | third_party/lcms2-2.6/0018-verify-size-before-reading.patch | 17 |
1 files changed, 0 insertions, 17 deletions
diff --git a/third_party/lcms2-2.6/0018-verify-size-before-reading.patch b/third_party/lcms2-2.6/0018-verify-size-before-reading.patch deleted file mode 100644 index fa666e7f0c..0000000000 --- a/third_party/lcms2-2.6/0018-verify-size-before-reading.patch +++ /dev/null @@ -1,17 +0,0 @@ -diff --git a/third_party/lcms2-2.6/src/cmstypes.c b/third_party/lcms2-2.6/src/cmstypes.c -index 75f1fae32..4d96a1ed6 100644 ---- a/third_party/lcms2-2.6/src/cmstypes.c -+++ b/third_party/lcms2-2.6/src/cmstypes.c -@@ -173,6 +173,12 @@ cmsBool ReadPositionTable(struct _cms_typehandler_struct* self, - { - cmsUInt32Number i; - cmsUInt32Number *ElementOffsets = NULL, *ElementSizes = NULL; -+ cmsUInt32Number currentPosition; -+ -+ currentPosition = io->Tell(io); -+ // Verify there is enough space left to read two cmsUInt32Number items for Count items. -+ if (((io->ReportedSize - currentPosition) / (2 * sizeof(cmsUInt32Number))) < Count) -+ return FALSE; - - // Let's take the offsets to each element - ElementOffsets = (cmsUInt32Number *) _cmsCalloc(io ->ContextID, Count, sizeof(cmsUInt32Number)); |