mirrors
/
tigervnc
mirror of https://github.com/TigerVNC/tigervnc.git
Watch 1
Star 0
Fork 0
Code Issues 0 Releases 37 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2547 Commits
15 Branches
Tree: 1ff04d1b8a
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '1ff04d1b8a'
${ noResults }
tigervnc/contrib/packages/rpm/el5/SOURCES/freetype-2.3.11-CVE-2010-38...

freetype-2.3.11-CVE-2010-3855.patch 652B
Raw Blame History

1234567891011121314151617181920 
  1. --- freetype-2.3.11/src/truetype/ttgxvar.c.orig	2009-07-31 18:45:19.000000000 +0200

  2. +++ freetype-2.3.11/src/truetype/ttgxvar.c	2010-10-22 08:52:37.000000000 +0200

  3. @@ -157,7 +157,7 @@

  4.          runcnt = runcnt & GX_PT_POINT_RUN_COUNT_MASK;

  5.          first  = points[i++] = FT_GET_USHORT();

  6.  

  7. -        if ( runcnt < 1 )

  8. +        if ( runcnt < 1 || i + runcnt >= n )

  9.            goto Exit;

  10.  

  11.          /* first point not included in runcount */

  12. @@ -168,7 +168,7 @@

  13.        {

  14.          first = points[i++] = FT_GET_BYTE();

  15.  

  16. -        if ( runcnt < 1 )

  17. +        if ( runcnt < 1 || i + runcnt >= n )

  18.            goto Exit;

  19.  

  20.          for ( j = 0; j < runcnt; ++j )