summaryrefslogtreecommitdiff
path: root/patches/source/poppler/poppler-0.12.4-CVE-2010-3704.patch
blob: bfd5f41b078fd04bf5df545eeb7649a29fa4465f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
--- poppler-0.12.4/fofi/FoFiType1.cc	2010-01-17 01:06:57.000000000 +0100
+++ poppler-0.12.4/fofi/FoFiType1.cc	2010-10-06 13:37:39.000000000 +0200
@@ -13,7 +13,7 @@
 // All changes made under the Poppler project to this file are licensed
 // under GPL version 2 or later
 //
-// Copyright (C) 2005, 2008 Albert Astals Cid <aacid@kde.org>
+// Copyright (C) 2005, 2008, 2010 Albert Astals Cid <aacid@kde.org>
 // Copyright (C) 2005 Kristian Høgsberg <krh@redhat.com>
 //
 // To see a description of the changes please see the Changelog file that
@@ -241,7 +242,7 @@ void FoFiType1::parse() {
 		code = code * 8 + (*p2 - '0');
 	      }
 	    }
-	    if (code < 256) {
+	    if (code < 256 && code >= 0) {
 	      for (p = p2; *p == ' ' || *p == '\t'; ++p) ;
 	      if (*p == '/') {
 		++p;