diff options
author | Joachim Schrod <jschrod@acm.org> | 2007-06-28 13:16:06 +0000 |
---|---|---|
committer | Joachim Schrod <jschrod@acm.org> | 2007-06-28 13:16:06 +0000 |
commit | 405dd674e335843ede7817de9697c50e696c13bb (patch) | |
tree | 11c9588ff570c15e9f2df109fc47d573c441be28 /Build/source/texk/dviljk/ChangeLog | |
parent | aeefc403ad4b686d3d937865747ed18de040cd4a (diff) |
Fix more buffer overflows: Ghostscript command construction, read
from files into static arrays.
git-svn-id: svn://tug.org/texlive/trunk@4524 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/dviljk/ChangeLog')
-rw-r--r-- | Build/source/texk/dviljk/ChangeLog | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/Build/source/texk/dviljk/ChangeLog b/Build/source/texk/dviljk/ChangeLog index 08754485510..c51e85e9d6f 100644 --- a/Build/source/texk/dviljk/ChangeLog +++ b/Build/source/texk/dviljk/ChangeLog @@ -7,11 +7,17 @@ operations. Fixed also manual string copy operations on special strings. Fixed array buffer overflow in defpoint and fill special operations. + (DoSpecial): Call of ghostscript for psfile special had also a + potential buffer overflow caused by unchecked usage of sprintf. Bumped version number up to 2.6p3. * dvi2xx.h: Some fixed sized string arrays are pointers now, they get dynamically allocated. + (GetBytes): Another buffer overflow: Check that the buffer size is + sufficient to store the read bytes. That relies on the invariant + that the GetBytes macro is always called with an array as argument + and not with a pointer. * config.h: Throw an error if kpathsea is not used. dvi2xx.c had previously already kpathsea dependencies without protecting |