ports/graphics/xpdf3/files/patch-xpdf_TextOutputDev.cc
Cy Schubert 81b95851cf Backport fix for CVE-2019-16927 and CVE-2019-9877 from xpdf4.
PR:		241066
Submitted by:	naddy
MFH:		2019Q4
2019-10-04 22:12:43 +00:00

15 lines
572 B
C++

--- xpdf/TextOutputDev.cc.orig 2019-10-04 19:39:06 UTC
+++ xpdf/TextOutputDev.cc
@@ -2472,6 +2472,12 @@ TextBlock *TextPage::split(GList *charsA, int rot) {
//----- compute the horizontal and vertical profiles
+ if (xMin / splitPrecision < 0.5 * INT_MIN ||
+ xMax / splitPrecision > 0.5 * INT_MAX ||
+ yMin / splitPrecision < 0.5 * INT_MIN ||
+ xMax / splitPrecision > 0.5 * INT_MAX) {
+ return NULL;
+ }
// add some slack to the array bounds to avoid floating point
// precision problems
xMinI = (int)floor(xMin / splitPrecision) - 1;