| 1 | From: Tobias Geerinckx-Rice <[email protected]>
|
| 2 | Date: Thu, 28 Feb 2019 20:29:00 +0100
|
| 3 | Subject: [PATCH] netpbm: Fix CVE-2017-2586.
|
| 4 |
|
| 5 | Copied verbatim from Debian[0].
|
| 6 |
|
| 7 | [0]: https://sources.debian.org/data/main/n/netpbm-free/2:10.78.05-0.1/debian/patches/netpbm-CVE-2017-2586.patch
|
| 8 |
|
| 9 | ---
|
| 10 | diff -urNp old/converter/other/svgtopam.c new/converter/other/svgtopam.c
|
| 11 | |
| 12 | |
| 13 | @@ -676,7 +676,7 @@ stringToUint(const char * const string
|
| 14 |
|
| 15 | /* TODO: move this to nstring.c */
|
| 16 |
|
| 17 | - if (strlen(string) == 0)
|
| 18 | + if (string == NULL || strlen(string) == 0)
|
| 19 | pm_asprintf(errorP, "Value is a null string");
|
| 20 | else {
|
| 21 | char * tailptr;
|