diff options
author | Akira Kakuto <kakuto@fuk.kindai.ac.jp> | 2019-03-29 22:13:05 +0000 |
---|---|---|
committer | Akira Kakuto <kakuto@fuk.kindai.ac.jp> | 2019-03-29 22:13:05 +0000 |
commit | d22ffd7a19d10bea6d6a6ee371c17cd8387a202f (patch) | |
tree | 36fd5d7dde1cc47957ca0d3faf5e0aea4868d3af /Build/source/texk/dvipdfm-x/ChangeLog | |
parent | 7c46aa4892ef00d7ea3c61c546e785186c1d3565 (diff) |
fix security problem reported by Andy Nguyen
git-svn-id: svn://tug.org/texlive/trunk@50645 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/dvipdfm-x/ChangeLog')
-rw-r--r-- | Build/source/texk/dvipdfm-x/ChangeLog | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/Build/source/texk/dvipdfm-x/ChangeLog b/Build/source/texk/dvipdfm-x/ChangeLog index 5bbc511cf52..709472bedae 100644 --- a/Build/source/texk/dvipdfm-x/ChangeLog +++ b/Build/source/texk/dvipdfm-x/ChangeLog @@ -1,3 +1,14 @@ +2019-03-30 Akira Kakuto <kakuto@w32tex.org> + + * spc_xtx.c: "ap->curptr" was copied to "buffer" without + length validation. Fix this security problem. + * spc_pdfm.c: "ap->curptr" was copied to "buffer" without + length validation. Fix this security problem. + * specials.c: Error message was written using vsprintf(), + which has no length limitation. Use vsnprintf() instead. + + Report from Andy Nguyen of ETH Zurich. + 2019-03-05 Clerk Ma <maqiyuan130324@vip.qq.com> * tt_table.c: Fix 'null character(s)' warning caused by |