summaryrefslogtreecommitdiff
path: root/Build/source/texk/dvipng/dvipng-src/ChangeLog
diff options
context:
space:
mode:
authorKarl Berry <karl@freefriends.org>2019-04-05 01:43:07 +0000
committerKarl Berry <karl@freefriends.org>2019-04-05 01:43:07 +0000
commit234347a70dec6e5cafbabe3cd2341361c79f5b68 (patch)
treed800401ef769c7610b2e8d7e8cecc81b49e6d824 /Build/source/texk/dvipng/dvipng-src/ChangeLog
parent72e906bbd57066848e40adbba6d154a5f7c190a7 (diff)
dvi and tfm parsing checks, reports from Andy Nguyen of ETH Zurich (with help from afl-fuzz in one case)
git-svn-id: svn://tug.org/texlive/trunk@50773 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/dvipng/dvipng-src/ChangeLog')
-rw-r--r--Build/source/texk/dvipng/dvipng-src/ChangeLog9
1 files changed, 9 insertions, 0 deletions
diff --git a/Build/source/texk/dvipng/dvipng-src/ChangeLog b/Build/source/texk/dvipng/dvipng-src/ChangeLog
index 6fb7cd99a5e..55954f623ed 100644
--- a/Build/source/texk/dvipng/dvipng-src/ChangeLog
+++ b/Build/source/texk/dvipng/dvipng-src/ChangeLog
@@ -1,3 +1,12 @@
+2019-04-04 Karl Berry <karl@freefriends.org>
+
+ * tfm.c (ReadTFM): check for reading outside file bounds.
+ Report from Andy Nguyen of ETH Zurich.
+
+ * dvi.c (DVIGetCommand): check for (unsigned value) overflow
+ so we don't fail to realloc buffer if needed.
+ Report from Andy Nguyen of ETH Zurich, found using afl-fuzz.
+
2015-03-01 Jan-Åke Larsson <jan-ake.larsson@liu.se>
* RELEASE: Release 1.15