Blame SOURCES/djvulibre-3.5.27-out-of-bound-write.patch

rdobuilder 3550ff
From 7b0ef20690e08f1fe124aebbf42f6310e2f40f81 Mon Sep 17 00:00:00 2001
rdobuilder 3550ff
From: Leon Bottou <leon@bottou.org>
rdobuilder 3550ff
Date: Thu, 27 Jun 2019 18:38:03 -0400
rdobuilder 3550ff
Subject: [PATCH] Lizards!
rdobuilder 3550ff
rdobuilder 3550ff
---
rdobuilder 3550ff
 libdjvu/GString.cpp | 6 +++---
rdobuilder 3550ff
 1 file changed, 3 insertions(+), 3 deletions(-)
rdobuilder 3550ff
rdobuilder 3550ff
diff --git a/libdjvu/GString.cpp b/libdjvu/GString.cpp
rdobuilder 3550ff
index bf98bfe..b17ed2a 100644
rdobuilder 3550ff
--- a/libdjvu/GString.cpp
rdobuilder 3550ff
+++ b/libdjvu/GString.cpp
rdobuilder 3550ff
@@ -1216,11 +1216,11 @@ GP<GStringRep>
rdobuilder 3550ff
 GStringRep::getbuf(int n) const
rdobuilder 3550ff
 {
rdobuilder 3550ff
   GP<GStringRep> retval;
rdobuilder 3550ff
-  if(n< 0)
rdobuilder 3550ff
+  if(n < 0)
rdobuilder 3550ff
     n=strlen(data);
rdobuilder 3550ff
-  if(n>0)
rdobuilder 3550ff
+  if(n >= 0)
rdobuilder 3550ff
   {
rdobuilder 3550ff
-    retval=blank(n);
rdobuilder 3550ff
+    retval=blank((n>0) ? n : 1);
rdobuilder 3550ff
     char *ndata=retval->data;
rdobuilder 3550ff
     strncpy(ndata,data,n);
rdobuilder 3550ff
     ndata[n]=0;
rdobuilder 3550ff
-- 
rdobuilder 3550ff
2.31.1
rdobuilder 3550ff