Bugzilla – Attachment 22446 Details for
Bug 58356
VUL-0: CVE-2004-0691: qt: bmp parser overflow
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
IDP Log In
|
Forgot Password
[patch]
other fix
qimage.patch (text/plain), 822 bytes, created by
Waldo Bastian
on 2004-07-28 22:05:36 UTC
(
hide
)
Description:
other fix
Filename:
MIME Type:
Creator:
Waldo Bastian
Created:
2004-07-28 22:05:36 UTC
Size:
822 bytes
patch
obsolete
>Index: qimage.cpp >=================================================================== >RCS file: /home/kde/qt-copy/src/kernel/qimage.cpp,v >retrieving revision 1.61 >diff -u -p -r1.61 qimage.cpp >--- qimage.cpp 29 Apr 2004 22:31:18 -0000 1.61 >+++ qimage.cpp 28 Jul 2004 14:03:44 -0000 >@@ -4838,6 +4838,8 @@ bool read_dib( QDataStream& s, int offse > p = line[h-y-1] + x; > break; > default: // absolute mode >+ if ( b > (bpl - x) ) >+ return FALSE; > if ( d->readBlock( (char *)p, b ) != b ) > return FALSE; > if ( (b & 1) == 1 ) >@@ -4846,6 +4848,8 @@ bool read_dib( QDataStream& s, int offse > p += b; > } > } else { // encoded mode >+ if ( b > (bpl - x) ) >+ return FALSE; > memset( p, d->getch(), b ); // repeat pixel > x += b; > p += b;
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=22446">View the attachment on a separate page</a>.</b>
Actions:
View
|
Diff
Attachments on
bug 58356
:
22441
| 22446 |
22598
|
22599
|
22674
|
22675
|
22680
|
22691
|
22692