File r1837-Fix-for-CVE-2017-5886.patch of Package podofo.7908
------------------------------------------------------------------------
r1837 | aja_ | 2017-04-07 20:01:44 +0200 (vie, 07 abr 2017) | 2 lines
Fix for CVE-2017-5886
Index: src/base/PdfTokenizer.cpp
===================================================================
--- src/base/PdfTokenizer.cpp (revision 1836)
+++ src/base/PdfTokenizer.cpp (revision 1837)
@@ -239,7 +239,7 @@
*peType = ePdfTokenType_Token;
while( (c = m_device.Device()->Look()) != EOF
#- && counter < static_cast<pdf_int64>(m_buffer.GetSize()) )
#+ && counter + 1 < static_cast<pdf_int64>(m_buffer.GetSize()) )
- && counter < static_cast<long long>(m_buffer.GetSize()) )
+ && counter + 1 < static_cast<long long>(m_buffer.GetSize()) )
{
// ignore leading whitespaces
if( !counter && IsWhitespace( c ) )
@@ -318,7 +318,6 @@
m_buffer.GetBuffer()[counter] = '\0';
-
if( c == EOF && !counter )
{
// No characters were read before EOF, so we're out of data.
------------------------------------------------------------------------