File 0025-Related-to-CVE-2018-5308.patch of Package podofo
Subject: Related to CVE-2018-5308: Add in-parameter validity check
Url: https://sourceforge.net/p/podofo/code/1876/
--- a/podofo/trunk/src/base/PdfOutputStream.cpp
+++ b/podofo/trunk/src/base/PdfOutputStream.cpp
@@ -85,6 +85,11 @@
PdfMemoryOutputStream::PdfMemoryOutputStream( char* pBuffer, pdf_long lLen )
: m_lLen( 0 ), m_bOwnBuffer( false )
{
+ if( !pBuffer )
+ {
+ PODOFO_RAISE_ERROR( ePdfError_InvalidHandle );
+ }
+
m_lSize = lLen;
m_pBuffer = pBuffer;
}