]>
Commit | Line | Data |
---|---|---|
a450cc71 JB |
1 | --- XFree86-4.2.1/xc/lib/font/Type1/t1funcs.c.orig Fri Dec 14 20:56:44 2001 |
2 | +++ XFree86-4.2.1/xc/lib/font/Type1/t1funcs.c Wed Sep 18 16:04:20 2002 | |
3 | @@ -523,7 +523,9 @@ | |
4 | if (hypot(vals->pixel_matrix[0], vals->pixel_matrix[1]) < 1.0 || | |
5 | hypot(vals->pixel_matrix[2], vals->pixel_matrix[3]) < 1.0) | |
6 | return BadFontName; | |
7 | - | |
8 | + /* Reject large sizes too - may cause DoS in xfs or X-server due to abort() */ | |
9 | + if (hypot(vals->pixel_matrix[0], vals->pixel_matrix[3]) > 5000.0) | |
10 | + return BadFontName; | |
11 | /* set up default values */ | |
12 | FontDefaultFormat(&bit, &byte, &glyph, &scan); | |
13 | /* get any changes made from above */ |