Copied from Fedora.

http://pkgs.fedoraproject.org/cgit/libwmf.git/tree/libwmf-0.2.8.4-CVE-2015-4696.patch

--- libwmf-0.2.8.4/src/player/meta.h
+++ libwmf-0.2.8.4/src/player/meta.h
@@ -2585,6 +2585,8 @@
 			polyrect.BR[i] = clip->rects[i].BR;
 		}
 
+		if (FR->region_clip) FR->region_clip (API,&polyrect);
+
 		wmf_free (API,polyrect.TL);
 		wmf_free (API,polyrect.BR);
 	}
@@ -2593,9 +2595,10 @@
 		polyrect.BR = 0;
 
 		polyrect.count = 0;
+	
+		if (FR->region_clip) FR->region_clip (API,&polyrect);
 	}
 
-	if (FR->region_clip) FR->region_clip (API,&polyrect);
 
 	return (changed);
 }
t type='hidden' name='id' value='3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4'/><select name='h' onchange='this.form.submit();'>
<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4'>refs</a><a class='active' href='/guix/log/tests/lint.scm'>log</a><a href='/guix/tree/tests/lint.scm?id=3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4'>tree</a><a href='/guix/commit/tests/lint.scm?id=3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4'>commit</a><a href='/guix/diff/tests/lint.scm?id=3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/tests/lint.scm'>
<input type='hidden' name='id' value='3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4'>root</a>/<a href='/guix/log/tests?id=3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4'>tests</a>/<a href='/guix/log/tests/lint.scm?id=3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4'>lint.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/tests/lint.scm?id=3eaba5bd6bb74b0eb358c3017a3c630cd823a5c4&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2024-03-09 18:55:49 +0100'>2024-03-09</span></td><td><a href='/guix/commit/tests/lint.scm?id=47a0e5d9fb2209a27c2bffa163becbcb3356bf00'>lint: archival: Trigger “Save Code Now” for VCSes other than Git.</a><span class='msg-avail'>...<span class='msg-tooltip'>Until now, ‘save-origin’ would be called only when given a
&lt;git-reference&gt;.  With this change, ‘save-origin’ gets called for other
version control systems as well.

* guix/lint.scm (swh-response-&gt;warning): New procedure, formerly in
‘check-archival’.
(vcs-origin, save-package-source): New procedures.
(check-archival)[response-&gt;warning]: Remove.
Call ‘save-package-source’ in both the Git and the non-Git cases.
* tests/lint.scm ("archival: missing svn revision"): New test.

Change-Id: I535e4ec89488faf83bfa544d5e4935fa73ef54fb
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2024-02-12 12:03:53 +0100'>2024-02-12</span></td><td><a href='/guix/commit/tests/lint.scm?id=29f3089c841f00144f24f5c32296aebf22d752cc'>lint: archival: Check with ‘lookup-directory-by-nar-hash’.</a><span class='msg-avail'>...<span class='msg-tooltip'>While this method is new and nar-sha256 ExtIDs are currently available
only for new visits, it is fundamentally more reliable than the other
methods, which is why it comes first.

* guix/lint.scm (check-archival)[lookup-by-nar-hash]: New procedure.
Call ‘lookup-by-nar-hash’ before the other lookup methods.
* tests/lint.scm ("archival: content available")
("archival: content unavailable but disarchive available")
("archival: missing revision")
("archival: revision available"): Add a 404 response corresponding to
the ‘lookup-external-id’ request.
* tests/lint.scm ("archival: nar-sha256 extid available"): New test.

Change-Id: I4a81d6e022a3b72e6484726549d7fbae627f8e73
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2023-09-08 19:12:15 +0200'>2023-09-08</span></td><td><a href='/guix/commit/tests/lint.scm?id=96eda590e1eb288359532d92bbfc4795c60f3df5'>lint: Check that (cc-for-target) and friends are used.</a><span class='msg-avail'>...<span class='msg-tooltip'>"CC=gcc" is almost always incorrect; people often just don't
notice the incorrectness because they are compiling natively.
For an exception, see tzdata.

"guix style" partially made things worse, so I partially ignored it.

* guix/lint.scm (check-compiler-for-target): New linter.
* tests/lint.scm
("compiler-for-target: unconditional CC=gcc is unacceptable")
("compiler-for-target: looks through G-expressions")
("compiler-for-target: (cc-for-target) is acceptable")
("compiler-for-target: CC=gcc is acceptable when target=#false"):
Test it.

Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>Maxime Devos</td></tr>
<tr><td><span title='2023-05-06 17:12:45 +0200'>2023-05-06</span></td><td><a href='/guix/commit/tests/lint.scm?id=71fd35c1d55988c413a37c7d15006b4d38d7dde7'>lint: archival: Warn against non-origin package sources.</a><span class='msg-avail'>...<span class='msg-tooltip'>Suggested by Maxim Cournoyer &lt;maxim.cournoyer@gmail.com&gt;
and Simon Tournier &lt;zimon.toutoune@gmail.com&gt;.

* guix/lint.scm (check-archival): Add 'local-file?' clause.  Clarify
message in case (package-source package) is not an origin.
* tests/lint.scm ("archival: not an origin"): New test.
</span></span></td><td>Ludovic Courtès</td></tr>