summaryrefslogtreecommitdiff
path: root/Build/source/texk/dviljk/ChangeLog
diff options
context:
space:
mode:
authorJoachim Schrod <jschrod@acm.org>2007-06-28 13:16:06 +0000
committerJoachim Schrod <jschrod@acm.org>2007-06-28 13:16:06 +0000
commit405dd674e335843ede7817de9697c50e696c13bb (patch)
tree11c9588ff570c15e9f2df109fc47d573c441be28 /Build/source/texk/dviljk/ChangeLog
parentaeefc403ad4b686d3d937865747ed18de040cd4a (diff)
Fix more buffer overflows: Ghostscript command construction, read
from files into static arrays. git-svn-id: svn://tug.org/texlive/trunk@4524 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/dviljk/ChangeLog')
-rw-r--r--Build/source/texk/dviljk/ChangeLog6
1 files changed, 6 insertions, 0 deletions
diff --git a/Build/source/texk/dviljk/ChangeLog b/Build/source/texk/dviljk/ChangeLog
index 08754485510..c51e85e9d6f 100644
--- a/Build/source/texk/dviljk/ChangeLog
+++ b/Build/source/texk/dviljk/ChangeLog
@@ -7,11 +7,17 @@
operations. Fixed also manual string copy operations on special
strings. Fixed array buffer overflow in defpoint and fill special
operations.
+ (DoSpecial): Call of ghostscript for psfile special had also a
+ potential buffer overflow caused by unchecked usage of sprintf.
Bumped version number up to 2.6p3.
* dvi2xx.h: Some fixed sized string arrays are pointers now, they
get dynamically allocated.
+ (GetBytes): Another buffer overflow: Check that the buffer size is
+ sufficient to store the read bytes. That relies on the invariant
+ that the GetBytes macro is always called with an array as argument
+ and not with a pointer.
* config.h: Throw an error if kpathsea is not used. dvi2xx.c
had previously already kpathsea dependencies without protecting