diff options
| author | Ray Johnston <ray.johnston@artifex.com> | 2020-07-22 09:57:54 -0700 |
|---|---|---|
| committer | Chris Liddell <chris.liddell@artifex.com> | 2020-07-29 09:09:08 +0100 |
| commit | 7eab8141718744cf533667dcf024b4f2bd47b458 (patch) | |
| tree | 27759e943167ebad4322cfa0d21b855c6a71603f /base/version.mak | |
| parent | e49830f8efdbc3a9f4e8acaf708b68a742f515aa (diff) | |
| download | ghostpdl-7eab8141718744cf533667dcf024b4f2bd47b458.tar.gz | |
Bug 702582, CVE 2020-15900 Memory Corruption in Ghostscript 9.52
Fix the 'rsearch' calculation for the 'post' size to give the correct
size. Previous calculation would result in a size that was too large,
and could underflow to max uint32_t. Also fix 'rsearch' to return the
correct 'pre' string with empty string match.
A future change may 'undefine' this undocumented, non-standard operator
during initialization as we do with the many other non-standard internal
PostScript operators and procedures.
Diffstat (limited to 'base/version.mak')
0 files changed, 0 insertions, 0 deletions