summaryrefslogtreecommitdiffstats
path: root/arch/tde-deps/lcms/cve-2013-4276.patch
diff options
context:
space:
mode:
authorSlávek Banko <slavek.banko@axis.cz>2022-10-28 01:38:39 +0200
committerSlávek Banko <slavek.banko@axis.cz>2022-10-28 01:38:39 +0200
commitddc027255b1bafb5c0544a60947b7c448140e384 (patch)
tree37e8b384eadf2f7f32e478ca41f10d3610b7aedd /arch/tde-deps/lcms/cve-2013-4276.patch
parenta5c233945a54cedfcaf97a8d839b09a68b228e85 (diff)
downloadtde-packaging-ddc027255b1bafb5c0544a60947b7c448140e384.tar.gz
tde-packaging-ddc027255b1bafb5c0544a60947b7c448140e384.zip
ArchLinux: Update for final R14.0.13.
Add aarch64 and armv7h to architectures. Add pkgbuilds for several applications. Add pkgbuild for libkipi library. Add pkgbuilds for dependencies. Remove dependence on Python 2. Remove backported patches. Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
Diffstat (limited to 'arch/tde-deps/lcms/cve-2013-4276.patch')
-rw-r--r--arch/tde-deps/lcms/cve-2013-4276.patch62
1 files changed, 62 insertions, 0 deletions
diff --git a/arch/tde-deps/lcms/cve-2013-4276.patch b/arch/tde-deps/lcms/cve-2013-4276.patch
new file mode 100644
index 000000000..8f2f32297
--- /dev/null
+++ b/arch/tde-deps/lcms/cve-2013-4276.patch
@@ -0,0 +1,62 @@
+diff -ur lcms-1.19.dfsg/samples/icctrans.c lcms-1.19.dfsg-patched/samples/icctrans.c
+--- lcms-1.19.dfsg/samples/icctrans.c 2009-10-30 15:57:45.000000000 +0000
++++ lcms-1.19.dfsg-patched/samples/icctrans.c 2013-08-06 11:53:14.385266647 +0100
+@@ -86,6 +86,8 @@
+ static LPcmsNAMEDCOLORLIST InputColorant = NULL;
+ static LPcmsNAMEDCOLORLIST OutputColorant = NULL;
+
++unsigned int Buffer_size = 4096;
++
+
+ // isatty replacement
+
+@@ -500,7 +502,7 @@
+
+ Prefix[0] = 0;
+ if (!lTerse)
+- sprintf(Prefix, "%s=", C);
++ snprintf(Prefix, 20, "%s=", C);
+
+ if (InHexa)
+ {
+@@ -648,7 +650,9 @@
+ static
+ void GetLine(char* Buffer)
+ {
+- scanf("%s", Buffer);
++ char User_buffer[Buffer_size];
++ fgets(User_buffer, (Buffer_size - 1), stdin);
++ sscanf(User_buffer,"%s", Buffer);
+
+ if (toupper(Buffer[0]) == 'Q') { // Quit?
+
+@@ -668,7 +672,7 @@
+ static
+ double GetAnswer(const char* Prompt, double Range)
+ {
+- char Buffer[4096];
++ char Buffer[Buffer_size];
+ double val = 0.0;
+
+ if (Range == 0.0) { // Range 0 means double value
+@@ -738,7 +742,7 @@
+ static
+ WORD GetIndex(void)
+ {
+- char Buffer[4096], Name[40], Prefix[40], Suffix[40];
++ char Buffer[Buffer_size], Name[40], Prefix[40], Suffix[40];
+ int index, max;
+
+ max = cmsNamedColorCount(hTrans)-1;
+diff -ur lcms-1.19.dfsg/tifficc/tiffdiff.c lcms-1.19.dfsg-patched/tifficc/tiffdiff.c
+--- lcms-1.19.dfsg/tifficc/tiffdiff.c 2009-10-30 15:57:46.000000000 +0000
++++ lcms-1.19.dfsg-patched/tifficc/tiffdiff.c 2013-08-06 11:49:06.698951157 +0100
+@@ -633,7 +633,7 @@
+ cmsIT8SetSheetType(hIT8, "TIFFDIFF");
+
+
+- sprintf(Buffer, "Differences between %s and %s", TiffName1, TiffName2);
++ snprintf(Buffer, 256, "Differences between %s and %s", TiffName1, TiffName2);
+
+ cmsIT8SetComment(hIT8, Buffer);
+