Copied from Fedora.

http://pkgs.fedoraproject.org/cgit/libwmf.git/tree/libwmf-0.2.8.4-CVE-2015-4695.patch

--- libwmf-0.2.8.4/src/player/meta.h
+++ libwmf-0.2.8.4/src/player/meta.h
@@ -1565,7 +1565,7 @@ static int meta_rgn_create (wmfAPI* API,
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -2142,7 +2142,7 @@ static int meta_dib_brush (wmfAPI* API,w
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -3067,7 +3067,7 @@ static int meta_pen_create (wmfAPI* API,
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -3181,7 +3181,7 @@ static int meta_brush_create (wmfAPI* AP
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -3288,7 +3288,7 @@ static int meta_font_create (wmfAPI* API
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
@@ -3396,7 +3396,7 @@ static int meta_palette_create (wmfAPI*
 	objects = P->objects;
 
 	i = 0;
-	while (objects[i].type && (i < NUM_OBJECTS (API))) i++;
+	while ((i < NUM_OBJECTS (API)) && objects[i].type) i++;
 
 	if (i == NUM_OBJECTS (API))
 	{	WMF_ERROR (API,"Object out of range!");
></table>
<div class='path'>path: <a href='/guix/log/?id=08d60c8691f1ce2291c557022257170881567d76'>root</a>/<a href='/guix/log/gnu?id=08d60c8691f1ce2291c557022257170881567d76'>gnu</a>/<a href='/guix/log/gnu/system?id=08d60c8691f1ce2291c557022257170881567d76'>system</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/system?id=08d60c8691f1ce2291c557022257170881567d76&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2022-10-23 02:00:06 +0200'>2022-10-23</span></td><td><a href='/guix/commit/gnu/system?id=19f3dbcb4d4261b6d3813d36174b8ca6ac52d2ea'>system: Support bare-bones serial console.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/examples/bare-bones.tmpl (operating-system):
Add a ttyS0 console to kernel-arguments.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2022-10-13 17:41:59 +0200'>2022-10-13</span></td><td><a href='/guix/commit/gnu/system?id=9c976474465f055f0b3ceb7877a53ae1cad22613'>system: Use a valid license as the dummy license.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/images/wsl2.scm (dummy-package)[license]: Do not use #F.
</span></span></td><td>Ricardo Wurmus</td></tr>
<tr><td><span title='2022-09-26 23:29:38 +0200'>2022-09-26</span></td><td><a href='/guix/commit/gnu/system?id=f15a141cf35bd4188767f0e91c0654991d4c49e0'>file-systems: Add cgroup2 to %pseudo-file-system-types.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/file-systems.scm (%pseudo-file-system-types): Add cgroup2.

Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>Hilton Chain</td></tr>
<tr><td><span title='2022-09-25 09:27:35 +0200'>2022-09-25</span></td><td><a href='/guix/commit/gnu/system?id=2784fcf14d1ddb1bda28b44a433864dd3bd8333c'>system: images: Add a TODO comment.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/image.scm (system-tarball-image): Add it.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2022-09-24 14:49:09 +0200'>2022-09-24</span></td><td><a href='/guix/commit/gnu/system?id=c8112f3bd95269ce4aca12dedbfe61bb6b37acae'>system: images: Add wsl2 module.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/images/wsl2.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* doc/guix.texi ("System Images"): Document it.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Alex Griffin</td></tr>
<tr><td><span title='2022-09-24 14:49:09 +0200'>2022-09-24</span></td><td><a href='/guix/commit/gnu/system?id=233cf9f0367e78562f07ac9885ed2cc6defe17e1'>system: image: Add wsl2 support.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/image.scm (&lt;image&gt;)[format]: Add wsl2 support.
* gnu/system/image.scm (wsl2-image, wsl2-image-type): New variables.
(image-&gt;root-file-system): Add wsl2 image support.
(system-image): Ditto.
</span></span></td><td>Alex Griffin</td></tr>
<tr><td><span title='2022-09-24 14:49:09 +0200'>2022-09-24</span></td><td><a href='/guix/commit/gnu/system?id=8757c3f2934352fe8ad9a86f6e6f1d4b7245644d'>system: image: Add tarball support.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/image.scm (&lt;image&gt;)[fields]: Add tarball to the supported formats.
* gnu/system/image.scm (tarball-image, tarball-image-type): New variables.
(system-tarball-image): New procedure.
(image-&gt;root-file-system): Add tarball image support.
(system-image): Ditto.
* doc/guix.texi ("System Images"): Document it.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Alex Griffin</td></tr>
<tr><td><span title='2022-09-24 14:49:07 +0200'>2022-09-24</span></td><td><a href='/guix/commit/gnu/system?id=08a7eb187f09aeefbb03b8b28b0d67aab33d4a06'>platforms: x86: Rename Hurd hurd to i586-gnu.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/platforms/x86.scm (hurd): Rename it to ...
(i586-gnu): ... this variable.
* gnu/system/images/hurd.scm (hurd-disk-image, hurd-barebones-disk-image,
hurd-barebones-qcow2-image): Adapt those.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2022-09-24 14:20:36 +0200'>2022-09-24</span></td><td><a href='/guix/commit/gnu/system?id=c009c286a23f48b56731c3e7bc4875a9e88857c4'>image: Make the operating-system field mandatory.</a><span class='msg-avail'>...<span class='msg-tooltip'>Make the operating-system field mandatory as creating an image without it
makes no sense. Introduce a new macro, image-without-os for the specific cases
where the image is only created to be inherited from afterwards.

* gnu/image.scm (&lt;image&gt;)[operating-system]: Make it mandatory.
* gnu/system/image.scm (image-without-os): New macro.
(efi-disk-image, efi32-disk-image, iso9660-image, docker-image,
raw-with-offset-disk-image): Use it.
* gnu/system/images/hurd.scm (hurd-disk-image): Ditto.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2022-09-16 10:14:39 +0200'>2022-09-16</span></td><td><a href='/guix/commit/gnu/system?id=d0376f6718b57be90b2f7697c90e4ecbe0090e0f'>system: install: Do not load amdgpu in the installer image.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/install.scm (installation-os): Add amdgpu to
modprobe.blacklist.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Antero Mejr</td></tr>