File r1876-Related-to-CVE-2018-5308-Add-in-parameter-validity-check.patch of Package podofo.23799

------------------------------------------------------------------------
r1876 | mc-zyx | 2018-01-28 16:55:04 +0100 (dom, 28 ene 2018) | 2 lines

Related to CVE-2018-5308: Add in-parameter validity check


Index: src/base/PdfOutputStream.cpp
===================================================================
--- src/base/PdfOutputStream.cpp	(revision 1875)
+++ src/base/PdfOutputStream.cpp	(revision 1876)
@@ -85,6 +85,11 @@
 PdfMemoryOutputStream::PdfMemoryOutputStream( char* pBuffer, pdf_long lLen )
     : m_lLen( 0 ), m_bOwnBuffer( false )
 {
+    if( !pBuffer ) 
+    {
+        PODOFO_RAISE_ERROR( ePdfError_InvalidHandle );
+    }
+
     m_lSize   = lLen;
     m_pBuffer = pBuffer;
 }

------------------------------------------------------------------------
openSUSE Build Service is sponsored by