diff options
author | Norbert Preining <preining@logic.at> | 2018-09-17 23:55:58 +0000 |
---|---|---|
committer | Norbert Preining <preining@logic.at> | 2018-09-17 23:55:58 +0000 |
commit | 5faea90cb442dfe14a2c4e12687aa765a796e9f8 (patch) | |
tree | e873459388b7b85deba737977c2e64e17c766e71 /Build/source/texk/dvipsk/writet1.c | |
parent | b9533c7ad8a2f437eb086e52286ce9fd4b257d50 (diff) |
writet1.(c,w) of dvips, pdftex, luatex: protect against buffer overflow
git-svn-id: svn://tug.org/texlive/branches/branch2018@48688 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/dvipsk/writet1.c')
-rw-r--r-- | Build/source/texk/dvipsk/writet1.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/Build/source/texk/dvipsk/writet1.c b/Build/source/texk/dvipsk/writet1.c index 0fcf269070b..3b478b90084 100644 --- a/Build/source/texk/dvipsk/writet1.c +++ b/Build/source/texk/dvipsk/writet1.c @@ -1449,7 +1449,9 @@ static void t1_check_unusual_charstring(void) *(strend(t1_buf_array) - 1) = ' '; t1_getline(); + alloc_array(t1_buf, strlen(t1_line_array) + strlen(t1_buf_array) + 1, T1_BUF_SIZE); strcat(t1_buf_array, t1_line_array); + alloc_array(t1_line, strlen(t1_buf_array) + 1, T1_BUF_SIZE); strcpy(t1_line_array, t1_buf_array); t1_line_ptr = eol(t1_line_array); } |