Copied from Fedora.

http://pkgs.fedoraproject.org/cgit/libwmf.git/tree/libwmf-0.2.8.4-CVE-2007-3473.patch

--- libwmf-0.2.8.4/src/extra/gd/gd.c
+++ libwmf-0.2.8.4/src/extra/gd/gd.c
@@ -2483,6 +2483,10 @@ BGD_DECLARE(gdImagePtr) gdImageCreateFromXbm (FILE * fd)
     }
   bytes = (w * h / 8) + 1;
   im = gdImageCreate (w, h);
+  if (!im) {
+    return 0;
+  }
+
   gdImageColorAllocate (im, 255, 255, 255);
   gdImageColorAllocate (im, 0, 0, 0);
   x = 0;
logo'/></a></td>
<td class='main'><a href='/'>index</a> : <a href='/guix/'>guix</a></td><td class='form'><form method='get'>
<input type='hidden' name='id' value='9f1c0e03ecfe6453f57ba9d9344dcf97c257799b'/><select name='h' onchange='this.form.submit();'>
<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=9f1c0e03ecfe6453f57ba9d9344dcf97c257799b'>refs</a><a class='active' href='/guix/log/configure.ac'>log</a><a href='/guix/tree/configure.ac?id=9f1c0e03ecfe6453f57ba9d9344dcf97c257799b'>tree</a><a href='/guix/commit/configure.ac?id=9f1c0e03ecfe6453f57ba9d9344dcf97c257799b'>commit</a><a href='/guix/diff/configure.ac?id=9f1c0e03ecfe6453f57ba9d9344dcf97c257799b'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/configure.ac'>
<input type='hidden' name='id' value='9f1c0e03ecfe6453f57ba9d9344dcf97c257799b'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=9f1c0e03ecfe6453f57ba9d9344dcf97c257799b'>root</a>/<a href='/guix/log/configure.ac?id=9f1c0e03ecfe6453f57ba9d9344dcf97c257799b'>configure.ac</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/configure.ac?id=9f1c0e03ecfe6453f57ba9d9344dcf97c257799b&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2018-02-26 18:19:34 +0100'>2018-02-26</span></td><td><a href='/guix/commit/configure.ac?id=1d84d7bf6052c0c80bd212d4524876576e9817d4'>build: Require Guile &gt;= 2.0.13.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-02-07 15:41:23 +0100'>2018-02-07</span></td><td><a href='/guix/commit/configure.ac?id=b617a9fe239ea645c816d6afcb81d5476f760d84'>etc: Add SELinux policy for the daemon.</a><span class='msg-avail'>...</span></td><td>Ricardo Wurmus</td></tr>
<tr><td><span title='2018-01-23 10:13:16 +0100'>2018-01-23</span></td><td><a href='/guix/commit/configure.ac?id=cba386c1295b7054df22dfb4662b1b92f668e2c0'>build: Expand ‘scripts/guix’ at Make time.</a><span class='msg-avail'>...</span></td><td>Mathieu Lirzin</td></tr>
<tr><td><span title='2018-01-16 16:00:20 +0100'>2018-01-16</span></td><td><a href='/guix/commit/configure.ac?id=b83fc85f9f40d9a5dff5b0d3ef38c1b93bd4c7e3'>etc: Add completions for fish.</a><span class='msg-avail'>...</span></td><td>ng0</td></tr>
<tr><td><span title='2018-01-06 14:45:01 +0100'>2018-01-06</span></td><td><a href='/guix/commit/configure.ac?id=142182514b84ee233bc27e574df2ca2074291525'>build: Detect broken 'equal?' in Guile 2.2.1.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2017-10-09 18:56:15 -0500'>2017-10-09</span></td><td><a href='/guix/commit/configure.ac?id=05c4e379b7a9911b47bc4cff8dc1aa7b432e83b6'>build: Update automake version requirement to 1.14.</a><span class='msg-avail'>...</span></td><td>Eric Bavier</td></tr>
<tr><td><span title='2017-09-05 20:57:12 +0200'>2017-09-05</span></td><td><a href='/guix/commit/configure.ac?id=a4c1e99ed95c5032f8e6201fb7bcf1692f9c92c8'>build: Negate ‘--disable-daemon’ help string.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-08-02 00:03:59 +0200'>2017-08-02</span></td><td><a href='/guix/commit/configure.ac?id=7441f1dbd77b09f6170858795bc7deea6280b972'>build: Make Guile-Git a hard requirement.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2017-06-30 00:16:50 +0200'>2017-06-30</span></td><td><a href='/guix/commit/configure.ac?id=1d97fd8cb60f0b5f386f834940f859ff0b0bcc71'>build: Remove check for broken (srfi srfi-37).</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2017-06-09 09:48:26 +0200'>2017-06-09</span></td><td><a href='/guix/commit/configure.ac?id=6b7b3ca9813d00b734d1318e40e6c10d17859d12'>guix: git: Add new module.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2017-05-05 20:12:57 -0400'>2017-05-05</span></td><td><a href='/guix/commit/configure.ac?id=40d728a87d4b6993437ed33dbe2dcb47363ae7c0'>Revert "guix: git: Add new module."</a><span class='msg-avail'>...</span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2017-05-05 19:52:38 +0200'>2017-05-05</span></td><td><a href='/guix/commit/configure.ac?id=a70b784708fb5e1b78430aa793d89ca04bc641a8'>guix: git: Add new module.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2017-05-04 23:51:45 +0200'>2017-05-04</span></td><td><a href='/guix/commit/configure.ac?id=e6860b5e7f8ded96c1769dcff27dffb97587e3e2'>build: Use Gnulib's 'git-version-gen'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>