blob: 4d2d285641408936952fe5e2eb72b9dc271b9d62 [file] [log] [blame]
Patrick Williamsb48b7b42016-08-17 15:04:38 -05001
2http://cvs.fedoraproject.org/viewvc/devel/libwmf/libwmf-0.2.8.4-useafterfree.patch?view=log
3Resolves: CVE-2009-1364
4
5--- libwmf-0.2.8.4/src/extra/gd/gd_clip.c.CVE-2009-1364-im-clip-list 2009-04-24 04:06:44.000000000 -0400
6+++ libwmf-0.2.8.4/src/extra/gd/gd_clip.c 2009-04-24 04:08:30.000000000 -0400
7@@ -70,6 +70,7 @@ void gdClipSetAdd(gdImagePtr im,gdClipRe
8 { more = gdRealloc (im->clip->list,(im->clip->max + 8) * sizeof (gdClipRectangle));
9 if (more == 0) return;
10 im->clip->max += 8;
11+ im->clip->list = more;
12 }
13 im->clip->list[im->clip->count] = (*rect);
14 im->clip->count++;