rpms/cups/FC-3 cups-CAN-2005-2097.patch, NONE, 1.1 cups.spec, 1.63, 1.64

[fedora-cvs-commits at redhat.com]

Author: twaugh

Update of /cvs/dist/rpms/cups/FC-3
In directory cvs.devel.redhat.com:/tmp/cvs-serv24890

Modified Files:
	cups.spec 
Added Files:
	cups-CAN-2005-2097.patch 
Log Message:
Embargo lifted

cups-CAN-2005-2097.patch:
 FontFile.cxx |    4 ++++
 1 files changed, 4 insertions(+)

--- NEW FILE cups-CAN-2005-2097.patch ---
--- cups-1.1.22rc1/pdftops/FontFile.cxx.CAN-2005-2097	2005-07-29 16:19:40.000000000 +0100
+++ cups-1.1.22rc1/pdftops/FontFile.cxx	2005-07-29 16:33:40.000000000 +0100
@@ -18,6 +18,7 @@
 #include <stdarg.h>
 #include <string.h>
 #include <ctype.h>
+#include <error.h>
 #include "gmem.h"
 #include "GHash.h"
 #include "Error.h"
@@ -3572,6 +3573,9 @@
     } else {
       origLocaTable[i].pos = 2 * getUShort(pos + 2*i);
     }
+
+    if (origLocaTable[i].pos < 0 || origLocaTable[i].pos > len)
+      error (1, 0, "bad loca table pos value");
   }
   qsort(origLocaTable, nGlyphs + 1, sizeof(TrueTypeLoca), &cmpTrueTypeLocaPos);
   for (i = 0; i < nGlyphs; ++i) {


Index: cups.spec
===================================================================
RCS file: /cvs/dist/rpms/cups/FC-3/cups.spec,v
retrieving revision 1.63
retrieving revision 1.64
diff -u -r1.63 -r1.64
--- cups.spec	7 Feb 2005 17:07:33 -0000	1.63
+++ cups.spec	9 Aug 2005 16:42:03 -0000	1.64
@@ -6,7 +6,7 @@
 Summary: Common Unix Printing System
 Name: cups
 Version: 1.1.22
-Release: 0.rc1.8.5
+Release: 0.rc1.8.6
 License: GPL
 Group: System Environment/Daemons
 Source: ftp://ftp.easysw.com/pub/cups/test/cups-%{version}rc1-source.tar.bz2
@@ -47,7 +47,8 @@
 Patch33: cups-str970.patch
 Patch34: cups-135378.patch
 Patch35: cups-CAN-2005-0064.patch
-Patch36: cups-dbus.patch
+Patch36: cups-CAN-2005-2097.patch
+Patch37: cups-dbus.patch
 Epoch: 1
 Url: http://www.cups.org/
 BuildRoot: %{_tmppath}/%{name}-root
@@ -130,8 +131,9 @@
 %patch33 -p1 -b .str970
 %patch34 -p1 -b .135378
 %patch35 -p1 -b .CAN-2005-0064
+%patch36 -p1 -b .CAN-2005-2097
 %if %use_dbus
-%patch36 -p1 -b .dbus
+%patch37 -p1 -b .dbus
 %endif
 perl -pi -e 's,^#(Printcap\s+/etc/printcap),$1,' conf/cupsd.conf.in
 aclocal -I config-scripts
@@ -355,6 +357,9 @@
 %{_includedir}/cups
 
 %changelog
+* Tue Aug  2 2005 Tim Waugh <twaugh at redhat.com> 1:1.1.22-0.rc1.8.6
+- Fixed CAN-2005-2097 (bug #164510).
+
 * Mon Feb  7 2005 Tim Waugh <twaugh at redhat.com> 1:1.1.22-0.rc1.8.5
 - Apply patch to fix remainder of CAN-2004-0888 (bug #135378).