Attachment 829636 Details for Bug 947868 – updated patch for CVE-2013-1913

[patch] updated patch for CVE-2013-1913

0001-file-xwd-sanity-check-colormap-size-CVE-2013-1913.patch (text/plain), 1.14 KB, created by Nils Philippsen on 2013-11-27 10:45:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Nils Philippsen

Created: 2013-11-27 10:45:29 UTC

Size: 1.14 KB

patch

obsolete

>From 3997c7188a71dc8fc4c6a7513061180cbbd3590e Mon Sep 17 00:00:00 2001
>From: Nils Philippsen <nils@redhat.com>
>Date: Thu, 14 Nov 2013 14:29:01 +0100
>Subject: [PATCH 1/2] file-xwd: sanity check colormap size (CVE-2013-1913)
>
>---
> plug-ins/common/file-xwd.c | 11 +++++++++++
> 1 file changed, 11 insertions(+)
>
>diff --git a/plug-ins/common/file-xwd.c b/plug-ins/common/file-xwd.c
>index c8e1a6e..343129a 100644
>--- a/plug-ins/common/file-xwd.c
>+++ b/plug-ins/common/file-xwd.c
>@@ -466,6 +466,17 @@ load_image (const gchar  *filename,
>   /* Position to start of XWDColor structures */
>   fseek (ifp, (long)xwdhdr.l_header_size, SEEK_SET);
> 
>+  /* Guard against insanely huge color maps -- gimp_image_set_colormap() only
>+   * accepts colormaps with 0..256 colors anyway. */
>+  if (xwdhdr.l_colormap_entries > 256)
>+    {
>+      g_message (_("'%s':\nIllegal number of colormap entries: %ld"),
>+                 gimp_filename_to_utf8 (filename),
>+                 (long)xwdhdr.l_colormap_entries);
>+      fclose (ifp);
>+      return -1;
>+    }
>+
>   if (xwdhdr.l_colormap_entries > 0)
>     {
>       xwdcolmap = g_new (L_XWDCOLOR, xwdhdr.l_colormap_entries);
>-- 
>1.8.4.2
>

Actions: View | Diff

Attachments on bug 947868: 829636