The file names in the upstream patch below were modified to apply to GNU
ghostscript.

From 0c0b0859ae1aba64861599f0e7f74f143f305932 Mon Sep 17 00:00:00 2001
From: Chris Liddell <chris.liddell@artifex.com>
Date: Tue, 7 Jul 2015 16:57:41 +0100
Subject: [PATCH] Bug 696041: sanity check for memory allocation.

In gs_heap_alloc_bytes(), add a sanity check to ensure we don't overflow the
variable holding the actual number of bytes we allocate.

No cluster differences
---
 gs/base/gsmalloc.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/base/gsmalloc.c b/base/gsmalloc.c
index 624552d..cad79c2 100644
--- a/base/gsmalloc.c
+++ b/base/gsmalloc.c
@@ -178,7 +178,7 @@ gs_heap_alloc_bytes(gs_memory_t * mem, uint size, client_name_t cname)
     } else {
         uint added = size + sizeof(gs_malloc_block_t);
 
-        if (mmem->limit - added < mmem->used)
+        if (added <= size || mmem->limit - added < mmem->used)
             set_msg("exceeded limit");
         else if ((ptr = (byte *) Memento_label(malloc(added), cname)) == 0)
             set_msg("failed");
-- 
2.4.6

out/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=18c921aedb9d695c234d84aca5b69c6b377be65b'>refs</a><a class='active' href='/guix/log/etc/guix-daemon.service.in?showmsg=1'>log</a><a href='/guix/tree/etc/guix-daemon.service.in?id=18c921aedb9d695c234d84aca5b69c6b377be65b'>tree</a><a href='/guix/commit/etc/guix-daemon.service.in?id=18c921aedb9d695c234d84aca5b69c6b377be65b'>commit</a><a href='/guix/diff/etc/guix-daemon.service.in?id=18c921aedb9d695c234d84aca5b69c6b377be65b'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/etc/guix-daemon.service.in'>
<input type='hidden' name='id' value='18c921aedb9d695c234d84aca5b69c6b377be65b'/><input type='hidden' name='showmsg' value='1'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=18c921aedb9d695c234d84aca5b69c6b377be65b&amp;showmsg=1'>root</a>/<a href='/guix/log/etc?id=18c921aedb9d695c234d84aca5b69c6b377be65b&amp;showmsg=1'>etc</a>/<a href='/guix/log/etc/guix-daemon.service.in?id=18c921aedb9d695c234d84aca5b69c6b377be65b&amp;showmsg=1'>guix-daemon.service.in</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/etc/guix-daemon.service.in?id=18c921aedb9d695c234d84aca5b69c6b377be65b'>Collapse</a>)</th><th class='left'>Author</th></tr>
<tr class='logheader'><td><span title='2022-10-23 02:00:26 +0200'>2022-10-23</span></td><td class='logsubject'><a href='/guix/commit/etc/guix-daemon.service.in?id=068f1a1905099f32beec9a8c4904efbb4c503981'>etc: systemd services shouldn't ‘RemainAfterExit’.</a></td><td>Tobias Geerinckx-Rice</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
* etc/guix-daemon.service.in (RemainAfterExit): Don't.
* etc/guix-publish.service.in (RemainAfterExit): Likewise don't.


</td></tr>
<tr class='logheader'><td><span title='2022-10-23 02:00:25 +0200'>2022-10-23</span></td><td class='logsubject'><a href='/guix/commit/etc/guix-daemon.service.in?id=0f6ec662f626eb5ff0685a20ca7e153dae7442e6'>etc: Add ‘Restart=always’ to both systemd services.</a></td><td>Tobias Geerinckx-Rice</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
* etc/guix-daemon.service.in (Restart): ‘Always’ do.
* etc/guix-publish.service.in (Restart): Likewise.


</td></tr>
<tr class='logheader'><td><span title='2022-10-23 02:00:00 +0200'>2022-10-23</span></td><td class='logsubject'><a href='/guix/commit/etc/guix-daemon.service.in?id=f16d91295a743d43b1604103b1399a621badea8c'>etc: Add ‘OOMPolicy=continue’ to guix-daemon.service.</a></td><td>Tobias Geerinckx-Rice</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
* etc/guix-daemon.service.in (OOMPolicy): Continue.


</td></tr>
<tr class='logheader'><td><span title='2021-07-07 23:54:20 -0400'>2021-07-07</span></td><td class='logsubject'><a href='/guix/commit/etc/guix-daemon.service.in?id=4cbe0127a668cbcc64087c5d311308b59d39b104'>guix-install.sh: Prompt for configuring substitutes discovery.</a></td><td>Maxim Cournoyer</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
Also ensure prompt_yes_no always print the message with a trailing space,
which is more pleasing to the eye.

* etc/guix-daemon.conf.in &lt;--discover=no&gt;: New guix-daemon option.
* etc/guix-daemon.service.in: Likewise.
* etc/init.d/guix-daemon.in: Likewise.
* etc/openrc/guix-daemon.in: Likewise.
* etc/guix-install.sh (configure_substitute_discovery): New procedure.
(sys_enable_guix_daemon): Ask the user whether automatic substitute discovery
should be enabled.  Set the '--discover' argument accordingly.
(prompt_yes_no): Add a trailing space to the message.
(sys_authorize_build_farms): Remove trailing space from the message argument.
* NEWS (Distribution): Add news.


</td></tr>