File fribidi-CVE-2022-25309.patch of Package fribidi.24295
From f22593b82b5d1668d1997dbccd10a9c31ffea3b3 Mon Sep 17 00:00:00 2001
From: Dov Grobgeld <dov.grobgeld@gmail.com>
Date: Fri, 25 Mar 2022 09:09:49 +0300
Subject: [PATCH 2/4] Protected against garbage in the CapRTL encoder
Backported by Mike Gorse <mgorse@suse.com>
---
diff -urp fribidi-0.19.6.orig/charset/fribidi-char-sets-cap-rtl.c fribidi-0.19.6/charset/fribidi-char-sets-cap-rtl.c
--- fribidi-0.19.6.orig/charset/fribidi-char-sets-cap-rtl.c 2012-12-02 10:25:40.000000000 -0600
+++ fribidi-0.19.6/charset/fribidi-char-sets-cap-rtl.c 2022-05-13 14:16:45.968951941 -0500
@@ -226,7 +226,12 @@ fribidi_cap_rtl_to_unicode (
}
}
else
- us[j++] = caprtl_to_unicode[(int) s[i]];
+ {
+ if ((int)s[i] < 0)
+ us[j++] = '?';
+ else
+ us[j++] = caprtl_to_unicode[(int) s[i]];
+ }
}
return j;
Only in fribidi-0.19.6.orig/lib: fribidi-deprecated.c.orig