summaryrefslogtreecommitdiff
path: root/Build/source/texk/dvipdfm-x/ChangeLog
diff options
context:
space:
mode:
Diffstat (limited to 'Build/source/texk/dvipdfm-x/ChangeLog')
-rw-r--r--Build/source/texk/dvipdfm-x/ChangeLog11
1 files changed, 11 insertions, 0 deletions
diff --git a/Build/source/texk/dvipdfm-x/ChangeLog b/Build/source/texk/dvipdfm-x/ChangeLog
index 5bbc511cf52..709472bedae 100644
--- a/Build/source/texk/dvipdfm-x/ChangeLog
+++ b/Build/source/texk/dvipdfm-x/ChangeLog
@@ -1,3 +1,14 @@
+2019-03-30 Akira Kakuto <kakuto@w32tex.org>
+
+ * spc_xtx.c: "ap->curptr" was copied to "buffer" without
+ length validation. Fix this security problem.
+ * spc_pdfm.c: "ap->curptr" was copied to "buffer" without
+ length validation. Fix this security problem.
+ * specials.c: Error message was written using vsprintf(),
+ which has no length limitation. Use vsnprintf() instead.
+
+ Report from Andy Nguyen of ETH Zurich.
+
2019-03-05 Clerk Ma <maqiyuan130324@vip.qq.com>
* tt_table.c: Fix 'null character(s)' warning caused by