Bugzilla – Attachment 22675 Details for
Bug 58356
VUL-0: CVE-2004-0691: qt: bmp parser overflow
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
IDP Log In
|
Forgot Password
[patch]
XPM fix 2
foo (text/plain), 1.42 KB, created by
Marcus Meissner
on 2004-08-12 16:38:53 UTC
(
hide
)
Description:
XPM fix 2
Filename:
MIME Type:
Creator:
Marcus Meissner
Created:
2004-08-12 16:38:53 UTC
Size:
1.42 KB
patch
obsolete
>FYI >----- Forwarded message from qt-bugs@trolltech.com ----- > >From: qt-bugs@trolltech.com >To: Marcus Meissner <mm@lst.de> >Subject: Re: [Issue N53426] crash in XPM reader of QT3 >Cc: qt-bugs@trolltech.com > >Hi Marcus, > >On Friday, 30. jul 2004 15:52 Marcus Meissner wrote: >> On Thu, Jul 29, 2004 at 11:32:04PM +0200, qt-bugs@trolltech.com wrote: >> > On Thursday, 29. Jul 2004 22:17 Marcus Meissner wrote: >> > > (This is a follow up on the other QT3 image loader issue.) >> > > >> > > The XPM reader can also crash. >> > > >> > > Just change the 3rd argument of the image definition to be >> > > negative. >> > >> > Hi Marcus >> > >> > I can't find any other image loader issues from this email address. >> > Did >> > you get a task number for that issue? >> >> (from the submitter on vendor-sec) >> > The BMP issue is either 53231 or 53426. > >Ok, this issue has been fixed now with the following patch: > >==== //depot/qt/3/src/kernel/qimage.cpp#26 - c: >\work\depot\qt\3\src\kernel\qimage.cpp ==== >@@ -5723,6 +5723,9 @@ > image.create( w, h, 8, ncols ); > } > >+ if (image.isNull()) >+ return; >+ > QMap<QString, int> colorMap; > int currentColor; > > >Thanks for the report and have a nice day! > >Andy >-- >Trolltech AS, Waldemar Thranes gate 98, NO-0175 Oslo, Norway > > >----- End forwarded message ----- >_______________________________________________ >Vendor Security mailing list >Vendor Security@lst.de >https://www.lst.de/cgi-bin/mailman/listinfo/vendor-sec
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
Actions:
View
|
Diff
Attachments on
bug 58356
:
22441
|
22446
|
22598
|
22599
|
22674
| 22675 |
22680
|
22691
|
22692