Copied from Fedora.

http://pkgs.fedoraproject.org/cgit/libwmf.git/tree/libwmf-0.2.8.4-CVE-2015-4695.patch

--- libwmf-0.2.8.4/src/player/meta.h
+++ libwmf-0.2.8.4/src/player/meta.h
@@ -1565,7 +1565,7 @@ static int meta_rgn_create (wmfAPI* API,
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -2142,7 +2142,7 @@ static int meta_dib_brush (wmfAPI* API,w
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -3067,7 +3067,7 @@ static int meta_pen_create (wmfAPI* API,
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -3181,7 +3181,7 @@ static int meta_brush_create (wmfAPI* AP
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -3288,7 +3288,7 @@ static int meta_font_create (wmfAPI* API
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -3396,7 +3396,7 @@ static int meta_palette_create (wmfAPI*
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
ue=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=a3c6998dba35cc7dfd857fb179659a14b0a1e583'>root</a>/<a href='/guix/log/gnu?id=a3c6998dba35cc7dfd857fb179659a14b0a1e583'>gnu</a>/<a href='/guix/log/gnu/build?id=a3c6998dba35cc7dfd857fb179659a14b0a1e583'>build</a>/<a href='/guix/log/gnu/build/image.scm?id=a3c6998dba35cc7dfd857fb179659a14b0a1e583'>image.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/build/image.scm?id=a3c6998dba35cc7dfd857fb179659a14b0a1e583&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2022-12-12 10:47:59 +0200'>2022-12-12</span></td><td><a href='/guix/commit/gnu/build/image.scm?id=45f5feb279860cde0d8032f05c3e5b45588b9609'>image: Use 512 byte blocks for EFI partitions.</a><span class='msg-avail'>...<span class='msg-tooltip'>Addresses &lt;https://issues.guix.gnu.org/59695&gt;.

* gnu/build/image.scm (make-vfat-image): When creating a fat filesystem
for UEFI bootable partition use 512 byte blocks.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2022-08-30 19:29:58 +0200'>2022-08-30</span></td><td><a href='/guix/commit/gnu/build/image.scm?id=192b7d0c0b0958d6c87df6084a644e0c7eca2ec0'>build: image: Make partition uuid optional.</a><span class='msg-avail'>...<span class='msg-tooltip'>The uuid field of &lt;partition&gt; defaults to #false. This should be reflected
when creating the partition.

* gnu/build/image.scm (make-ext-image): Make it optional.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2022-08-30 19:29:58 +0200'>2022-08-30</span></td><td><a href='/guix/commit/gnu/build/image.scm?id=61bbff9d5015d0f60ad68f1814e0a0b0ea0592b8'>build: image: Remove unused variable.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/image.scm (make-ext-image): Remove the unused flags variable.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2022-06-24 10:21:06 +0200'>2022-06-24</span></td><td><a href='/guix/commit/gnu/build/image.scm?id=62c86c8391ceb8953ca972498fd75ea9298b85ff'>image: Add support for 32bit UEFI.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/bootloader/grub.scm (grub-efi32-bootloader): New variable.
(install-grub-efi32): New variable.
* gnu/build/bootloader.scm (install-efi): Add a 'targets' keyword
argument.
(install-efi-loader): Likewise.
* gnu/build/image.scm (initialize-efi32-partition): New procedure.
* gnu/packages/bootloaders.scm (grub-efi32): New variable.
* gnu/system/image.scm (esp32-partition): New variable
(efi32-disk-image): New variable.
(efi32-raw-image-type): New variable.
(system-disk-image)[partition-image]: Set '#:grub-efi32' when
calling the partition initializer.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Denis 'GNUtoo' Carikli</td></tr>
<tr><td><span title='2022-05-31 14:51:13 +0200'>2022-05-31</span></td><td><a href='/guix/commit/gnu/build/image.scm?id=8b680b00d49bdd1064918ffd221ffbcc11ba902a'>image: Add fat32 support.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/image.scm (make-vfat-image): Pass fs-bits as an argument and force
1kb logical sector size only if "ESP" flag is set.
(make-partition-image): Add "fat32" partition type, support explicit "fat16"
type with vfat alias.
* gnu/system/image.scm (partition-&gt;dos-type partition): Return file system IDs
for "fat16" and "fat32" partitions.
(partition-&gt;gpt-type partition): Ditto.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Pavel Shlyak</td></tr>
<tr><td><span title='2022-05-23 09:17:12 +0200'>2022-05-23</span></td><td><a href='/guix/commit/gnu/build/image.scm?id=bb662d71e6e3db69114645d690bc033c5ffa1ac5'>image: Add bootable flag support.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/image.scm (sexp-&gt;partition): Add flags support.
* gnu/system/image.scm (partition-&gt;gexp): Ditto.
(system-disk-image): Set the genimage bootable flag if it is part of the
partition flags.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Pavel Shlyak</td></tr>
<tr><td><span title='2022-02-07 16:22:37 -0500'>2022-02-07</span></td><td><a href='/guix/commit/gnu/build/image.scm?id=472680a28d83f79935bd526db6ed7ed39cdd9198'>build: image: Account for fixed-size file system structures.</a><span class='msg-avail'>...<span class='msg-tooltip'>Workaround for &lt;https://issues.guix.gnu.org/53194&gt;.

* gnu/build/image.scm (estimate-partition-size): Enforce a 1-MiB minimum.

Signed-off-by: Maxim Cournoyer &lt;maxim.cournoyer@gmail.com&gt;
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2021-12-23 10:53:59 +0100'>2021-12-23</span></td><td><a href='/guix/commit/gnu/build/image.scm?id=cc4e8a84f4d5d8861c9445ec7e4a75b59d50d3db'>build: image: Add optional closure copy support.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/image.scm (initialize-root-partition): Add a closure-copy?
argument and honor it.
</span></span></td><td>Mathieu Othacehe</td></tr>