On Thu, 2018-01-25 at 20:38 +0100, Matthew Brincke wrote: > - it isn't a "crash" (segfault, abort by SIGABRT or similar)
Hi, I see. It looks like I did something wrong when testing the change. When trying once again now I can confirm what you see, the change does fix the CVE. I do not know what I did wrong the last time, I'm sorry about that. I committed the patch as revision 1872: http://sourceforge.net/p/podofo/code/1872 Bye, zyx ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Podofo-users mailing list Podofo-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/podofo-users