From 5c49b577febc466737509e6e7bf3b6a5b57a6433 Mon Sep 17 00:00:00 2001 From: Karl Berry Date: Sun, 7 Apr 2019 12:59:36 +0000 Subject: dvipng-1.16 with parsing fixes git-svn-id: svn://tug.org/texlive/trunk@50838 c570f23f-e606-0410-a88d-b1316a301751 --- Build/source/texk/dvipng/ChangeLog | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) (limited to 'Build/source/texk/dvipng/ChangeLog') diff --git a/Build/source/texk/dvipng/ChangeLog b/Build/source/texk/dvipng/ChangeLog index 4017a55f209..49e02efd2a8 100644 --- a/Build/source/texk/dvipng/ChangeLog +++ b/Build/source/texk/dvipng/ChangeLog @@ -1,3 +1,21 @@ +2019-04-07 Karl Berry + + * version.ac (dvipng_version): 1.16. + * Import release 1.16 from Savannah, including these + among other changes: + +2019-04-06 Jan-Åke Larsson + + * pk.c (InitPK): check for packet_length reading outside file bounds. + Report from Andy Nguyen of ETH Zurich. + + * tfm.c (ReadTFM): check for reading outside file bounds. + Report from Andy Nguyen of ETH Zurich. + + * dvi.c (DVIGetCommand): check for (unsigned value) overflow + so we don't fail to realloc buffer if needed. + Report from Andy Nguyen of ETH Zurich, found using afl-fuzz. + 2016-02-23 Akira Kakuto * Makefile.am, configure.ac: New convention. -- cgit v1.2.3