Jaroslav Škarvada eb3e39
Subject: Fix heap-based buffer overflow in pstoedit_suffix_table_init
Jaroslav Škarvada eb3e39
ID: CVE-2016-7392
Jaroslav Škarvada eb3e39
Author: unknown (taken from DLA-621-1)
Jaroslav Škarvada eb3e39
Bug-Debian: https://bugs.debian.org/837599
Jaroslav Škarvada eb3e39
Jaroslav Škarvada eb3e39
--- a/output-pstoedit.c
Jaroslav Škarvada eb3e39
+++ b/output-pstoedit.c
Jaroslav Škarvada eb3e39
@@ -84,7 +84,7 @@
Jaroslav Škarvada eb3e39
       dd_tmp   = dd_start;
Jaroslav Škarvada eb3e39
       while (dd_tmp->symbolicname)
Jaroslav Škarvada eb3e39
 	dd_tmp++;
Jaroslav Škarvada eb3e39
-      XMALLOC(pstoedit_suffix_table, sizeof(char *) * 2 * (dd_tmp - dd_start) + 1);
Jaroslav Škarvada eb3e39
+      XMALLOC(pstoedit_suffix_table, sizeof(char *) * (2 * (dd_tmp - dd_start) + 1));
Jaroslav Škarvada eb3e39
 
Jaroslav Škarvada eb3e39
 #if defined (OUTPUT_PSTOEDIT_DEBUG) && defined(__GNUC__)
Jaroslav Škarvada eb3e39
   fprintf(stderr, "OUTPUT PSTOEDIT BACKEND DEBUG(%s)\n", __FUNCTION__);