- CVE-2007-6697 (stolen from Fedora; #430238)

Changed files:
    SDL_image-buffer-overflow.patch -> 1.1

diff --git a/SDL_image-buffer-overflow.patch b/SDL_image-buffer-overflow.patch
new file mode 100644 (file)
index 0000000..0be82dc
--- /dev/null
+++ b/SDL_image-buffer-overflow.patch
@@ -0,0 +1,13 @@
+--- trunk/SDL_image/IMG_gif.c  2007/12/28 08:17:23     3461
++++ trunk/SDL_image/IMG_gif.c  2007/12/28 16:43:56     3462
+@@ -418,6 +418,10 @@
+     static int stack[(1 << (MAX_LWZ_BITS)) * 2], *sp;
+     register int i;
+ 
++    /* Fixed buffer overflow found by Michael Skladnikiewicz */
++    if (input_code_size > MAX_LWZ_BITS)
++        return -1;
++
+     if (flag) {
+       set_code_size = input_code_size;
+       code_size = set_code_size + 1;