freebsd-ports/print/ghostscript7-base/files/patch-src-zgeneric.c
Hiroki Sato 27470e1676 - Split ghostscript into X11-independent and -dependent parts:
* print/ghostscript{7,8,9,9-agpl}-base

   Installs Ghostscript binary, libgs, and related files.
   These ports do not depend on X11 libraries (i.e. x11* devices
   are not available).  USES=ghostscript will set dependency on
   one of them depending on GHOSTSCRIPT_DEFAULT.

   The default device is set to "display" or "bbox".

 * print/ghostscript{7,8,9,9-agpl}-x11

   Installs a shared library which provides X11 support to
   the installed Ghostscript binaries.  x11* devices will be
   enabled when the library is available.

   This depends on *-base (RUN_DEPENDS).  USES=ghostscript:x11
   will set dependency on one of them.

- Fix integer overflow reported as CVE-2015-3228.

- Update Uses/ghostscript.mk:

 * Add x11 keyword.  nox11 keyword is now obsolete.

 * Use packagename in *_DEPENDS line to prevent relationship between
   -base and -x11 packages from being broken.

- Fix x11/nox11 keyword and bump PORTREVISION in ports using
  USES=ghostscript to update dependency of pre-compiled packages.
2015-08-22 17:48:35 +00:00

20 lines
681 B
C

--- src/zgeneric.c.orig 2013-04-30 10:55:48.000000000 +0900
+++ src/zgeneric.c 2013-04-30 10:56:40.000000000 +0900
@@ -76,7 +76,7 @@
int count, i;
int code;
- if ((ulong) op->value.intval > op - osbot) {
+ if ((uint)op->value.intval > (uint)(op - osbot)) {
/* There might be enough elements in other blocks. */
check_int_ltu(*op, ref_stack_count(&o_stack));
count = op->value.intval;
@@ -471,7 +471,7 @@
{
os_ptr op = osp;
es_ptr obj = esp - 2;
- int index = (int)esp->value.intval;
+ int index = esp->value.intval;
push(2); /* make room for key and value */
if ((index = dict_next(obj, index, op - 1)) >= 0) { /* continue */