diff options
| author | Ken Sharp <ken.sharp@artifex.com> | 2022-08-30 09:31:10 +0100 |
|---|---|---|
| committer | Ken Sharp <ken.sharp@artifex.com> | 2022-08-30 09:31:10 +0100 |
| commit | 0381294369ea5bacd10b4167b336bf1cb6d8d4ef (patch) | |
| tree | 1ca4cacaaff02bd178d34de0da1c6f827115fe84 /base/ttinterp.c | |
| parent | c96973654959228193cd45f1c76de22f96f0dda8 (diff) | |
| download | ghostpdl-0381294369ea5bacd10b4167b336bf1cb6d8d4ef.tar.gz | |
GhostPDF - Only get the required number of Range values for a ColorSpace
Bug #705828 "stack-overflow in /targets/ghostscript/foo/./pdf/pdf_colour.c:2236 pdfi_create_colorspace_by_array"
The code was reading all the entries in a Range array into a stack
array. But we hadn't validated the maximum number in the array so we
could overrun. Limit the copy to the maximum number required by the
'N' value (which is validated).
Diffstat (limited to 'base/ttinterp.c')
0 files changed, 0 insertions, 0 deletions