summaryrefslogtreecommitdiff
path: root/Build/source/texk/dvipdfm-x/ChangeLog
diff options
context:
space:
mode:
authorAkira Kakuto <kakuto@fuk.kindai.ac.jp>2019-03-29 22:13:05 +0000
committerAkira Kakuto <kakuto@fuk.kindai.ac.jp>2019-03-29 22:13:05 +0000
commitd22ffd7a19d10bea6d6a6ee371c17cd8387a202f (patch)
tree36fd5d7dde1cc47957ca0d3faf5e0aea4868d3af /Build/source/texk/dvipdfm-x/ChangeLog
parent7c46aa4892ef00d7ea3c61c546e785186c1d3565 (diff)
fix security problem reported by Andy Nguyen
git-svn-id: svn://tug.org/texlive/trunk@50645 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/dvipdfm-x/ChangeLog')
-rw-r--r--Build/source/texk/dvipdfm-x/ChangeLog11
1 files changed, 11 insertions, 0 deletions
diff --git a/Build/source/texk/dvipdfm-x/ChangeLog b/Build/source/texk/dvipdfm-x/ChangeLog
index 5bbc511cf52..709472bedae 100644
--- a/Build/source/texk/dvipdfm-x/ChangeLog
+++ b/Build/source/texk/dvipdfm-x/ChangeLog
@@ -1,3 +1,14 @@
+2019-03-30 Akira Kakuto <kakuto@w32tex.org>
+
+ * spc_xtx.c: "ap->curptr" was copied to "buffer" without
+ length validation. Fix this security problem.
+ * spc_pdfm.c: "ap->curptr" was copied to "buffer" without
+ length validation. Fix this security problem.
+ * specials.c: Error message was written using vsprintf(),
+ which has no length limitation. Use vsnprintf() instead.
+
+ Report from Andy Nguyen of ETH Zurich.
+
2019-03-05 Clerk Ma <maqiyuan130324@vip.qq.com>
* tt_table.c: Fix 'null character(s)' warning caused by