diff options
author | Karl Berry <karl@freefriends.org> | 2019-04-05 01:43:07 +0000 |
---|---|---|
committer | Karl Berry <karl@freefriends.org> | 2019-04-05 01:43:07 +0000 |
commit | 234347a70dec6e5cafbabe3cd2341361c79f5b68 (patch) | |
tree | d800401ef769c7610b2e8d7e8cecc81b49e6d824 /Build/source/texk/dvipng/dvipng-src/ChangeLog | |
parent | 72e906bbd57066848e40adbba6d154a5f7c190a7 (diff) |
dvi and tfm parsing checks, reports from Andy Nguyen of ETH Zurich (with help from afl-fuzz in one case)
git-svn-id: svn://tug.org/texlive/trunk@50773 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/dvipng/dvipng-src/ChangeLog')
-rw-r--r-- | Build/source/texk/dvipng/dvipng-src/ChangeLog | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/Build/source/texk/dvipng/dvipng-src/ChangeLog b/Build/source/texk/dvipng/dvipng-src/ChangeLog index 6fb7cd99a5e..55954f623ed 100644 --- a/Build/source/texk/dvipng/dvipng-src/ChangeLog +++ b/Build/source/texk/dvipng/dvipng-src/ChangeLog @@ -1,3 +1,12 @@ +2019-04-04 Karl Berry <karl@freefriends.org> + + * tfm.c (ReadTFM): check for reading outside file bounds. + Report from Andy Nguyen of ETH Zurich. + + * dvi.c (DVIGetCommand): check for (unsigned value) overflow + so we don't fail to realloc buffer if needed. + Report from Andy Nguyen of ETH Zurich, found using afl-fuzz. + 2015-03-01 Jan-Åke Larsson <jan-ake.larsson@liu.se> * RELEASE: Release 1.15 |