Fix CVE-2017-7885:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7885
https://bugs.ghostscript.com/show_bug.cgi?id=697703

Patch copied from upstream source repository:

https://git.ghostscript.com/?p=jbig2dec.git;a=commit;h=258290340bb657c9efb44457f717b0d8b49f4aa3

From 258290340bb657c9efb44457f717b0d8b49f4aa3 Mon Sep 17 00:00:00 2001
From: Shailesh Mistry <shailesh.mistry@hotmail.co.uk>
Date: Wed, 3 May 2017 22:06:01 +0100
Subject: [PATCH] Bug 697703: Prevent integer overflow vulnerability.

Add extra check for the offset being greater than the size
of the image and hence reading off the end of the buffer.

Thank you to Dai Ge for finding this issue and suggesting a patch.
---
 jbig2_symbol_dict.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/jbig2_symbol_dict.c b/jbig2_symbol_dict.c
index 4acaba9..36225cb 100644
--- a/jbig2_symbol_dict.c
+++ b/jbig2_symbol_dict.c
@@ -629,7 +629,7 @@ jbig2_decode_symbol_dict(Jbig2Ctx *ctx,
                 byte *dst = image->data;
 
                 /* SumatraPDF: prevent read access violation */
-                if (size - jbig2_huffman_offset(hs) < image->height * stride) {
+                if ((size - jbig2_huffman_offset(hs) < image->height * stride) || (size < jbig2_huffman_offset(hs))) {
                     jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "not enough data for decoding (%d/%d)", image->height * stride,
                                 size - jbig2_huffman_offset(hs));
                     jbig2_image_release(ctx, image);
-- 
2.13.0

>
<input type='hidden' name='id' value='2ad3b0187b5d893cc694a9c436b32ca001aa4816'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=2ad3b0187b5d893cc694a9c436b32ca001aa4816'>root</a>/<a href='/guix/log/gnu?id=2ad3b0187b5d893cc694a9c436b32ca001aa4816'>gnu</a>/<a href='/guix/log/gnu/bootloader?id=2ad3b0187b5d893cc694a9c436b32ca001aa4816'>bootloader</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/bootloader?id=2ad3b0187b5d893cc694a9c436b32ca001aa4816&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2024-05-22 11:15:30 +0800'>2024-05-22</span></td><td><a href='/guix/commit/gnu/bootloader?id=c7aec90a916a99067fd9915337caf098ee8e5083'>bootloader: Add u-boot-starfive-visionfive2-bootloader.</a><span class='msg-avail'>...</span></td><td>Zheng Junjie</td></tr>
<tr><td><span title='2024-03-31 22:26:21 +0200'>2024-03-31</span></td><td><a href='/guix/commit/gnu/bootloader?id=64187b65d3acb13b91dd83fc8e7209c8ef538078'>bootloader: Add u-boot-qemu-riscv64-bootloader.</a><span class='msg-avail'>...</span></td><td>Zheng Junjie</td></tr>
<tr><td><span title='2024-01-14 23:00:03 +0100'>2024-01-14</span></td><td><a href='/guix/commit/gnu/bootloader?id=086850e5b2b4a1744565fe83624d256524b64a49'>bootloader: grub: Add support for loading an additional initrd.</a><span class='msg-avail'>...</span></td><td>Tomas Volf</td></tr>
<tr><td><span title='2023-12-22 16:06:03 -0800'>2023-12-22</span></td><td><a href='/guix/commit/gnu/bootloader?id=88fb95903c1d94b3be7e8a811d943af988041e4e'>gnu: bootloader: Add orangepi-r1-plus-lts-rk3328 bootloader.</a><span class='msg-avail'>...</span></td><td>Herman Rimm</td></tr>
<tr><td><span title='2023-07-13 18:59:13 +0200'>2023-07-13</span></td><td><a href='/guix/commit/gnu/bootloader?id=c22c29b0c4821ebe2c66a6c76562a41d33ff8392'>bootloader: grub: Use rumpdisk-style root when booting with "noide".</a><span class='msg-avail'>...</span></td><td>Janneke Nieuwenhuizen</td></tr>