File CVE-2025-59799.patch of Package ghostscript.41464

--- devices/vector/gdevpdfm.c.orig	2020-03-19 09:21:42.000000000 +0100
+++ devices/vector/gdevpdfm.c	2025-11-03 16:25:52.929570185 +0100
@@ -199,6 +199,8 @@ pdfmark_coerce_dest(gs_param_string *dst
 {
     const byte *data = dstr->data;
     uint size = dstr->size;
+    if (size > MAX_DEST_STRING)
+        return_error(gs_error_limitcheck);
     if (size == 0 || data[0] != '(')
         return 0;
     /****** HANDLE ESCAPES ******/
@@ -846,6 +848,8 @@ pdfmark_put_ao_pairs(gx_device_pdf * pde
             char buf[30];
             int d0, d1;
 
+	    if (Action[1].size > 29)
+                return_error(gs_error_rangecheck);
             memcpy(buf, Action[1].data, Action[1].size);
             buf[Action[1].size] = 0;
             if (sscanf(buf, "%d %d R", &d0, &d1) == 2)
openSUSE Build Service is sponsored by