File CVE-2016-8602.patch of Package ghostscript

From: Chris Liddell <chris.liddell@artifex.com>
Date: Sat, 8 Oct 2016 15:10:27 +0000 (+0100)
Subject: Bug 697203: check for sufficient params in .sethalftone5
X-Git-Url: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff_plain;h=f5c7555c30393e64ec1f5ab0dfae5b55b3b3fc78;hp=a5360401495654e89301b2516703c1d2877fc5ba

Bug 697203: check for sufficient params in .sethalftone5

and param types
---

--- ghostscript-9.15.orig/psi/zht2.c	2014-09-22 12:17:33.000000000 +0200
+++ ghostscript-9.15/psi/zht2.c	2016-10-18 17:36:31.000000000 +0200
@@ -82,14 +82,22 @@ zsethalftone5(i_ctx_t *i_ctx_p)
     gs_memory_t *mem;
     uint edepth = ref_stack_count(&e_stack);
     int npop = 2;
-    int dict_enum = dict_first(op);
+    int dict_enum;
     ref rvalue[2];
     int cname, colorant_number;
     byte * pname;
     uint name_size;
     int halftonetype, type = 0;
     gs_state *pgs = igs;
-    int space_index = r_space_index(op - 1);
+    int space_index;
+
+    if (ref_stack_count(&o_stack) < 2)
+        return_error(e_stackunderflow);
+    check_type(*op, t_dictionary);
+    check_type(*(op - 1), t_dictionary);
+
+    dict_enum = dict_first(op);
+    space_index = r_space_index(op - 1);
 
     mem = (gs_memory_t *) idmemory->spaces_indexed[space_index];
 
openSUSE Build Service is sponsored by