[evince/gnome-2-32] backends: Fix another security issue in the dvi-backend
- From: Vincent Untz <vuntz src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [evince/gnome-2-32] backends: Fix another security issue in the dvi-backend
- Date: Thu, 17 Feb 2011 14:45:50 +0000 (UTC)
commit 9611cfcd6c2f39aafab10730c291efd736ab97e4
Author: Vincent Untz <vuntz gnome org>
Date: Thu Feb 17 15:23:39 2011 +0100
backends: Fix another security issue in the dvi-backend
This is similar to one of the fixes from d4139205.
https://bugzilla.gnome.org/show_bug.cgi?id=640923
backend/dvi/mdvi-lib/afmparse.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/backend/dvi/mdvi-lib/afmparse.c b/backend/dvi/mdvi-lib/afmparse.c
index 361e23d..e1cd115 100644
--- a/backend/dvi/mdvi-lib/afmparse.c
+++ b/backend/dvi/mdvi-lib/afmparse.c
@@ -190,7 +190,7 @@ static char *linetoken(FILE *stream)
while ((ch = fgetc(stream)) == ' ' || ch == '\t' );
idx = 0;
- while (ch != EOF && ch != lineterm)
+ while (ch != EOF && ch != lineterm && idx < MAX_NAME)
{
ident[idx++] = ch;
ch = fgetc(stream);
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]