summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'net-print/cups/files/cups-1.3.9-CVE-2008-5286.patch')
-rw-r--r--net-print/cups/files/cups-1.3.9-CVE-2008-5286.patch22
1 files changed, 22 insertions, 0 deletions
diff --git a/net-print/cups/files/cups-1.3.9-CVE-2008-5286.patch b/net-print/cups/files/cups-1.3.9-CVE-2008-5286.patch
new file mode 100644
index 000000000000..bca23f71d7e4
--- /dev/null
+++ b/net-print/cups/files/cups-1.3.9-CVE-2008-5286.patch
@@ -0,0 +1,22 @@
+Index: filter/image-png.c
+===================================================================
+--- filter/image-png.c (revision 8062)
++++ filter/image-png.c (working copy)
+@@ -178,7 +178,7 @@
+ {
+ bufsize = img->xsize * img->ysize;
+
+- if ((bufsize / img->ysize) != img->xsize)
++ if ((bufsize / img->xsize) != img->ysize)
+ {
+ fprintf(stderr, "DEBUG: PNG image dimensions (%ux%u) too large!\n",
+ (unsigned)width, (unsigned)height);
+@@ -190,7 +190,7 @@
+ {
+ bufsize = img->xsize * img->ysize * 3;
+
+- if ((bufsize / (img->ysize * 3)) != img->xsize)
++ if ((bufsize / (img->xsize * 3)) != img->ysize)
+ {
+ fprintf(stderr, "DEBUG: PNG image dimensions (%ux%u) too large!\n",
+ (unsigned)width, (unsigned)height);