File r1876-Related-to-CVE-2018-5308-Add-in-parameter-validity-check.patch of Package podofo.23799
------------------------------------------------------------------------
r1876 | mc-zyx | 2018-01-28 16:55:04 +0100 (dom, 28 ene 2018) | 2 lines
Related to CVE-2018-5308: Add in-parameter validity check
Index: src/base/PdfOutputStream.cpp
===================================================================
--- src/base/PdfOutputStream.cpp (revision 1875)
+++ src/base/PdfOutputStream.cpp (revision 1876)
@@ -85,6 +85,11 @@
PdfMemoryOutputStream::PdfMemoryOutputStream( char* pBuffer, pdf_long lLen )
: m_lLen( 0 ), m_bOwnBuffer( false )
{
+ if( !pBuffer )
+ {
+ PODOFO_RAISE_ERROR( ePdfError_InvalidHandle );
+ }
+
m_lSize = lLen;
m_pBuffer = pBuffer;
}
------------------------------------------------------------------------