[BACK]Return to patch-texk_web2c_luatexdir_font_writet1.w CVS log [TXT][DIR] Up to [cvs.NetBSD.org] / pkgsrc / print / luatex / patches
File: [cvs.NetBSD.org] / pkgsrc / print / luatex / patches / Attic / patch-texk_web2c_luatexdir_font_writet1.w (download)

Revision 1.1, Thu Nov 1 10:59:15 2018 UTC (5 years, 5 months ago) by markd
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base, pkgsrc-2019Q1, pkgsrc-2018Q4-base, pkgsrc-2018Q4 

luatex: writet1 protection against buffer overflow

$NetBSD: patch-texk_web2c_luatexdir_font_writet1.w,v 1.1 2018/11/01 10:59:15 markd Exp $

writet1 protection against buffer overflow

git-svn-id: svn://tug.org/texlive/trunk/Build/source@48697 c570f23f-e606-0410-a88d-b1316a301751

--- texk/web2c/luatexdir/font/writet1.w.orig	2016-11-25 18:24:34.000000000 +0000
+++ texk/web2c/luatexdir/font/writet1.w
@@ -1625,7 +1625,9 @@ static void t1_check_unusual_charstring(
     if (sscanf(p, "%i", &i) != 1) {
         strcpy(t1_buf_array, t1_line_array);
         t1_getline();
+	alloc_array(t1_buf, strlen(t1_line_array) + strlen(t1_buf_array) + 1, T1_BUF_SIZE);
         strcat(t1_buf_array, t1_line_array);
+	alloc_array(t1_line, strlen(t1_buf_array) + 1, T1_BUF_SIZE);
         strcpy(t1_line_array, t1_buf_array);
         t1_line_ptr = eol(t1_line_array);
     }