File xpdf-3.02pl1-CVE-2007-3387.patch of Package xpdf

# upstream patch for CVE-2007-3387
--- xpdf-3.02.orig/xpdf/Stream.cc	2007-02-27 23:05:52.000000000 +0100
+++ xpdf-3.02/xpdf/Stream.cc	2007-11-02 19:02:47.974397067 +0100
@@ -410,15 +410,13 @@
   ok = gFalse;
 
   nVals = width * nComps;
-  if (width <= 0 || nComps <= 0 || nBits <= 0 ||
-      nComps >= INT_MAX / nBits ||
-      width >= INT_MAX / nComps / nBits ||
-      nVals * nBits + 7 < 0) {
-    return;
-  }
   pixBytes = (nComps * nBits + 7) >> 3;
   rowBytes = ((nVals * nBits + 7) >> 3) + pixBytes;
-  if (rowBytes <= 0) {
+  if (width <= 0 || nComps <= 0 || nBits <= 0 ||
+      nComps > gfxColorMaxComps ||
+      nBits > 16 ||
+      width >= INT_MAX / nComps ||      // check for overflow in nVals 
+      nVals >= (INT_MAX - 7) / nBits) { // check for overflow in rowBytes
     return;
   }
   predLine = (Guchar *)gmalloc(rowBytes);
openSUSE Build Service is sponsored by