diff options
Diffstat (limited to 'Build/source/texk/dvipdfm-x/ChangeLog')
-rw-r--r-- | Build/source/texk/dvipdfm-x/ChangeLog | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/Build/source/texk/dvipdfm-x/ChangeLog b/Build/source/texk/dvipdfm-x/ChangeLog index 5bbc511cf52..709472bedae 100644 --- a/Build/source/texk/dvipdfm-x/ChangeLog +++ b/Build/source/texk/dvipdfm-x/ChangeLog @@ -1,3 +1,14 @@ +2019-03-30 Akira Kakuto <kakuto@w32tex.org> + + * spc_xtx.c: "ap->curptr" was copied to "buffer" without + length validation. Fix this security problem. + * spc_pdfm.c: "ap->curptr" was copied to "buffer" without + length validation. Fix this security problem. + * specials.c: Error message was written using vsprintf(), + which has no length limitation. Use vsnprintf() instead. + + Report from Andy Nguyen of ETH Zurich. + 2019-03-05 Clerk Ma <maqiyuan130324@vip.qq.com> * tt_table.c: Fix 'null character(s)' warning caused by |