Description: Add check for buffer overflow with malformed input files This was later re-found and became CVE-2014-8123. Author: Bug-Debian: http://bugs.debian.org/407015 Bug-Debian: https://bugs.debian.org/771768 Forwarded: http://seclists.org/oss-sec/2014/q4/870 Last-Update: 2016-01-11 --- antiword-0.37~/wordole.c 2005-08-26 21:49:57.000000000 +0200 +++ antiword-0.37/wordole.c 2009-06-03 22:31:15.948014682 +0200 @@ -259,6 +259,10 @@ } tNameSize = (size_t)usGetWord(0x40, aucBytes); tNameSize = (tNameSize + 1) / 2; + if ( tNameSize > sizeof(atPPSlist[iIndex].szName)) { + werr(0, "Name Size of PPS %d is too large", iIndex); + tNameSize = sizeof(atPPSlist[iIndex].szName); + } vName2String(atPPSlist[iIndex].szName, aucBytes, tNameSize); atPPSlist[iIndex].ucType = ucGetByte(0x42, aucBytes); if (atPPSlist[iIndex].ucType == 5) { r> Wojtek's customized Guix
aboutsummaryrefslogtreecommitdiff
path: root/doc/images
AgeCommit message (Expand)Author
2022-05-12doc: Add the "Full-source Bootstrap"....* doc/guix.texi (Reduced Binary Seed Bootstrap): Update and rename to... (Full-Source Bootstrap): ...this. * doc/images/gcc-core-mesboot0-graph.dot: Regenerate. Jan (janneke) Nieuwenhuizen
2020-05-22doc: Update 'Bootstrapping' for further binary seed reduction....* doc/images/gcc-core-mesboot0-graph.dot: New image, replacing * doc/images/gcc-mesboot0-bag-graph.dot: ... remove file. * doc/local.mk (DOT_FILES): Update for new image file. * doc/guix.texi (Reduced Binary Seed Bootstrap): Use it in updated description of further reduction of the trusted computing base. Jan Nieuwenhuizen
2019-03-14Merge branch 'staging' into core-updatesMarius Bakke
2019-03-13doc: Document the graphical installer some more....* doc/guix.texi (Preparing for Installation): Rewrite to specify the two installation modes. (Guided Graphical Installation): New node. (Manual Installation): New node, with the former sections. (After System Installation): New node. * doc/images/installer-network.png, doc/images/installer-partitions.png, doc/images/installer-resume.png: New files. * doc/local.mk (dist_infoimage_DATA): Add them. Ludovic Courtès
2018-12-16doc: Update mesboot graph without bootstrap-guile....* doc/images/gcc-mesboot-bag-graph.dot: Update. Jan Nieuwenhuizen
2018-11-24doc: Update for bootstrap-mescc-tools change....* doc/guix.texi (Reduced Binary Seed Bootstrap): Update for bootstrap-mescc-tools change. * doc/images/gcc-mesboot-bag-graph.dot: Regenerate. Jan Nieuwenhuizen
2018-09-23doc: Describe the Reduced Binary Seed bootstrap....* doc/guix.texi (Reduced Binary Seed Bootstrap): New node. * doc/images/gcc-mesboot-bag-graph.dot: New file. * doc/local.mk (DOT_FILES): Add it. Jan Nieuwenhuizen
2016-12-17doc: Update dot graphs....* doc/images/bootstrap-packages.dot, doc/images/coreutils-bag-graph.dot, doc/images/coreutils-graph.dot, doc/images/shepherd-graph.dot: Regenerate. Ludovic Courtès