autotrace-CVE-2013-1953.patch

   1 diff -up autotrace-0.31.1/input-bmp.c.orig autotrace-0.31.1/input-bmp.c
   2 --- autotrace-0.31.1/input-bmp.c.orig   2002-10-10 22:44:08.000000000 +0200
   3 +++ autotrace-0.31.1/input-bmp.c        2013-06-28 10:24:58.336056959 +0200
   4 @@ -166,7 +166,7 @@ input_bmp_reader (at_string filename,
   5                                                          /* 36 */
   6        Maps = 4;
   7      }
   8 -  else if (Bitmap_File_Head.biSize <= 64) /* Probably OS/2 2.x */
   9 +  else if (Bitmap_File_Head.biSize >= 40 && Bitmap_File_Head.biSize <= 64) /* Probably OS/2 2.x */
  10      {
  11        if (!ReadOK (fd, buffer, Bitmap_File_Head.biSize - 4))
  12         {