Fix CVE-2016-8670 (buffer overflow in dynamicGetbuf()):

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8670
http://seclists.org/oss-sec/2016/q4/138

Patch copied from upstream source repository:

https://github.com/libgd/libgd/commit/53110871935244816bbb9d131da0bccff734bfe9

From 53110871935244816bbb9d131da0bccff734bfe9 Mon Sep 17 00:00:00 2001
From: "Christoph M. Becker" <cmbecker69@gmx.de>
Date: Wed, 12 Oct 2016 11:15:32 +0200
Subject: [PATCH] Avoid potentially dangerous signed to unsigned conversion

We make sure to never pass a negative `rlen` as size to memcpy(). See
also <https://bugs.php.net/bug.php?id=73280>.

Patch provided by Emmanuel Law.
---
 src/gd_io_dp.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/gd_io_dp.c b/src/gd_io_dp.c
index 135eda3..228bfa5 100644
--- a/src/gd_io_dp.c
+++ b/src/gd_io_dp.c
@@ -276,7 +276,7 @@ static int dynamicGetbuf(gdIOCtxPtr ctx, void *buf, int len)
 	if(remain >= len) {
 		rlen = len;
 	} else {
-		if(remain == 0) {
+		if(remain <= 0) {
 			/* 2.0.34: EOF is incorrect. We use 0 for
 			 * errors and EOF, just like fileGetbuf,
 			 * which is a simple fread() wrapper.
-- 
2.10.1

s='active' href='/guix/log/gnu/packages/hugs.scm'>log</a><a href='/guix/tree/gnu/packages/hugs.scm?id=0aa72f2d1e6ed0f7d77c6e52e95ee3120077c9cd'>tree</a><a href='/guix/commit/gnu/packages/hugs.scm?id=0aa72f2d1e6ed0f7d77c6e52e95ee3120077c9cd'>commit</a><a href='/guix/diff/gnu/packages/hugs.scm?id=0aa72f2d1e6ed0f7d77c6e52e95ee3120077c9cd'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/hugs.scm'>
<input type='hidden' name='id' value='0aa72f2d1e6ed0f7d77c6e52e95ee3120077c9cd'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=0aa72f2d1e6ed0f7d77c6e52e95ee3120077c9cd'>root</a>/<a href='/guix/log/gnu?id=0aa72f2d1e6ed0f7d77c6e52e95ee3120077c9cd'>gnu</a>/<a href='/guix/log/gnu/packages?id=0aa72f2d1e6ed0f7d77c6e52e95ee3120077c9cd'>packages</a>/<a href='/guix/log/gnu/packages/hugs.scm?id=0aa72f2d1e6ed0f7d77c6e52e95ee3120077c9cd'>hugs.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/hugs.scm?id=0aa72f2d1e6ed0f7d77c6e52e95ee3120077c9cd&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2017-09-20 20:58:04 -0400'>2017-09-20</span></td><td><a href='/guix/commit/gnu/packages/hugs.scm?id=dc1d3cdef70f0e3c047c229c2a0e561d1f47bde8'>gnu: Use 'modify-phases' syntax.</a><span class='msg-avail'>...</span></td><td>Kei Kebreau</td></tr>
<tr><td><span title='2017-03-30 10:35:52 +0200'>2017-03-30</span></td><td><a href='/guix/commit/gnu/packages/hugs.scm?id=e32f8dad9468f07f608fc0e2f83b9533d054a186'>gnu: hugs: Build with GCC 4.9.</a><span class='msg-avail'>...</span></td><td>Ricardo Wurmus</td></tr>