File 0025-Related-to-CVE-2018-5308.patch of Package podofo

Subject: Related to CVE-2018-5308: Add in-parameter validity check
Url: https://sourceforge.net/p/podofo/code/1876/

--- a/podofo/trunk/src/base/PdfOutputStream.cpp
+++ b/podofo/trunk/src/base/PdfOutputStream.cpp
@@ -85,6 +85,11 @@
 PdfMemoryOutputStream::PdfMemoryOutputStream( char* pBuffer, pdf_long lLen )
     : m_lLen( 0 ), m_bOwnBuffer( false )
 {
+    if( !pBuffer ) 
+    {
+        PODOFO_RAISE_ERROR( ePdfError_InvalidHandle );
+    }
+
     m_lSize   = lLen;
     m_pBuffer = pBuffer;
 }
openSUSE Build Service is sponsored by