- added CVE-2010-2642 patch from t1lib-5.1.2-10.1.src.rpm (OpenSuSE), rel. 4

[packages/t1lib.git] / t1lib-5.1.2-CVE-2010-2642.patch

Index: t1lib-5.1.2/lib/t1lib/parseAFM.c
===================================================================
--- t1lib-5.1.2.orig/lib/t1lib/parseAFM.c	2007-12-23 16:49:42.000000000 +0100
+++ t1lib-5.1.2/lib/t1lib/parseAFM.c	2011-01-07 10:52:38.953106681 +0100
@@ -199,7 +199,7 @@
     idx = 0;
     
     while (ch != EOF && ch != ' ' && ch != CR  && ch != LF &&
-	   ch != CTRL_Z && ch != '\t' && ch != ':' && ch != ';'){
+	   ch != CTRL_Z && ch != '\t' && ch != ':' && ch != ';' && idx < MAX_NAME){
       ident[idx++] = ch;
       ch = fgetc(stream);
     } /* while */