OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /v/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 24-May-2007 10:18:45
Branch: HEAD Handle: 2007052409184203
Modified files:
openpkg-src/freetype freetype.patch freetype.spec
Log:
Security Fix (CVE-2007-2754)
Summary:
Revision Changes Path
1.9 +39 -0 openpkg-src/freetype/freetype.patch
1.68 +1 -1 openpkg-src/freetype/freetype.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/freetype/freetype.patch
============================================================================
$ cvs diff -u -r1.8 -r1.9 freetype.patch
--- openpkg-src/freetype/freetype.patch 17 Jan 2007 17:31:50 -0000
1.8
+++ openpkg-src/freetype/freetype.patch 24 May 2007 08:18:42 -0000
1.9
@@ -98,3 +98,42 @@
/*************************************************************************/
/*
*/
/* The `raster' component duplicates some of the declarations in
*/
+
+-----------------------------------------------------------------------------
+
+Security Fix (CVE-2007-2754)
+
+Index: src/truetype/ttgload.c
+--- src/truetype/ttgload.c 2007/04/09 08:40:11 1.177
++++ src/truetype/ttgload.c 2007/04/27 17:16:50 1.178
+@@ -271,7 +271,11 @@
+
+ n_points = 0;
+ if ( n_contours > 0 )
++ {
+ n_points = cont[-1] + 1;
++ if ( n_points < 0 )
++ goto Invalid_Outline;
++ }
+
+ /* note that we will add four phantom points later */
+ error = FT_GLYPHLOADER_CHECK_POINTS( gloader, n_points + 4, 0 );
+@@ -682,7 +686,7 @@
+ FT_GlyphLoader gloader = loader->gloader;
+ FT_Error error = TT_Err_Ok;
+ FT_Outline* outline;
+- FT_UInt n_points;
++ FT_Int n_points;
+
+
+ outline = &gloader->current.outline;
+@@ -709,7 +713,7 @@
+ /* Deltas apply to the unscaled data. */
+ FT_Vector* deltas;
+ FT_Memory memory = loader->face->memory;
+- FT_UInt i;
++ FT_Int i;
+
+
+ error = TT_Vary_Get_Glyph_Deltas( (TT_Face)(loader->face),
+
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/freetype/freetype.spec
============================================================================
$ cvs diff -u -r1.67 -r1.68 freetype.spec
--- openpkg-src/freetype/freetype.spec 6 May 2007 22:17:08 -0000
1.67
+++ openpkg-src/freetype/freetype.spec 24 May 2007 08:18:45 -0000
1.68
@@ -33,7 +33,7 @@
Group: Graphics
License: GPL
Version: 2.3.4
-Release: 20070507
+Release: 20070524
# list of sources
Source0:
http://download.savannah.gnu.org/releases/freetype/freetype-%{version}.tar.gz
@@ .
______________________________________________________________________
OpenPKG http://openpkg.org
CVS Repository Commit List [email protected]
