From: Tobias Geerinckx-Rice <me@tobias.gr>
Date: Thu, 28 Feb 2019 20:29:00 +0100
Subject: [PATCH] netpbm: Fix CVE-2017-2586.

Copied verbatim from Debian[0].

[0]: https://sources.debian.org/data/main/n/netpbm-free/2:10.78.05-0.1/debian/patches/netpbm-CVE-2017-2586.patch

---
diff -urNp old/converter/other/svgtopam.c new/converter/other/svgtopam.c
--- old/converter/other/svgtopam.c	2017-02-08 12:11:02.593690917 +0100
+++ new/converter/other/svgtopam.c	2017-02-08 12:13:05.192846469 +0100
@@ -676,7 +676,7 @@ stringToUint(const char *   const string
 
     /* TODO: move this to nstring.c */
 
-    if (strlen(string) == 0)
+    if (string == NULL || strlen(string) == 0)
         pm_asprintf(errorP, "Value is a null string");
     else {
         char * tailptr;
d'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=a713ac5656456adaa59a9bbb6d76439f3d2783d2'>refs</a><a class='active' href='/guix/log/gnu/packages/vim.scm'>log</a><a href='/guix/tree/gnu/packages/vim.scm?id=a713ac5656456adaa59a9bbb6d76439f3d2783d2'>tree</a><a href='/guix/commit/gnu/packages/vim.scm?id=a713ac5656456adaa59a9bbb6d76439f3d2783d2'>commit</a><a href='/guix/diff/gnu/packages/vim.scm?id=a713ac5656456adaa59a9bbb6d76439f3d2783d2'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/vim.scm'>
<input type='hidden' name='id' value='a713ac5656456adaa59a9bbb6d76439f3d2783d2'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=a713ac5656456adaa59a9bbb6d76439f3d2783d2'>root</a>/<a href='/guix/log/gnu?id=a713ac5656456adaa59a9bbb6d76439f3d2783d2'>gnu</a>/<a href='/guix/log/gnu/packages?id=a713ac5656456adaa59a9bbb6d76439f3d2783d2'>packages</a>/<a href='/guix/log/gnu/packages/vim.scm?id=a713ac5656456adaa59a9bbb6d76439f3d2783d2'>vim.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/vim.scm?id=a713ac5656456adaa59a9bbb6d76439f3d2783d2&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-07-05 09:53:11 +0300'>2023-07-05</span></td><td><a href='/guix/commit/gnu/packages/vim.scm?id=63f8aab69cd615633122d70604c19c8abb410e79'>gnu: vim-full: Remove expat linker workaround.</a><span class='msg-avail'>...<span class='msg-tooltip'>Python has correctly linked with expat for several years now.

* gnu/packages/vim.scm (vim-full)[arguments]: Remove make-flags.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2023-07-05 09:53:11 +0300'>2023-07-05</span></td><td><a href='/guix/commit/gnu/packages/vim.scm?id=52efe95ac44ae7eb793825d5eb070c6a2d7ced47'>gnu: vim: Update to 9.0.1672.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/vim.scm (vim): Update to 9.0.1672.
[arguments]: Adjust custom 'skip-or-fix-failing-tests to skip another
test.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2023-07-01 08:09:21 +0100'>2023-07-01</span></td><td><a href='/guix/commit/gnu/packages/vim.scm?id=92d05b79e89ffa4635bf5d9eb49da3771c35c5e0'>gnu: neovim: Update to 0.9.1.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/vim.scm (neovim): Update to 0.9.1.

Signed-off-by: Christopher Baines &lt;mail@cbaines.net&gt;
</span></span></td><td>Benjamin</td></tr>
<tr><td><span title='2023-05-23 12:30:31 +0300'>2023-05-23</span></td><td><a href='/guix/commit/gnu/packages/vim.scm?id=3c33f7072a190231183f90a463a429dbb0d3e8b9'>gnu: vim-guix-vim: Update to 0.4.0.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/vim.scm (vim-guix-vim): Update to 0.4.0.
[source]: Download from new upstream URL.
[home-page]: Use new home-page.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2023-05-14 21:05:07 +0300'>2023-05-14</span></td><td><a href='/guix/commit/gnu/packages/vim.scm?id=f0b4cfb475cd4a3c147a9ccb90ddb3610df1954b'>gnu: vim: Update to 9.0.1384.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/vim.scm (vim): Update to 9.0.1384.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2023-05-07 12:22:20 +0300'>2023-05-07</span></td><td><a href='/guix/commit/gnu/packages/vim.scm?id=fccb48d2cec6bcf47647c82914f31e2dff617f9c'>gnu: neovim update to 0.9.0.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/vim.scm (neovim): Update to 0.9.0.
[arguments]: Adjust phase 'prevent-embedding-gcc-store-path to changes
in the source code.

Signed-off-by: Efraim Flashner &lt;efraim@flashner.co.il&gt;
</span></span></td><td>Benjamin</td></tr>
<tr><td><span title='2023-05-04 21:32:32 +0300'>2023-05-04</span></td><td><a href='/guix/commit/gnu/packages/vim.scm?id=df18eac9abe36f07f0acdbc2c4c13a4babe0a362'>gnu: vifm: Update to 0.13.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/vim.scm (vifm): Update to 0.13.
[arguments]: Adjust substitutions in custom 'patch-test-shebangs phase.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2023-03-31 14:16:13 +0200'>2023-03-31</span></td><td><a href='/guix/commit/gnu/packages/vim.scm?id=c000352c27f511dfb5569bef09f9b774d6100117'>gnu: Replace all uses of atk by at-spi2-core.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/animation.scm (gnash)
* gnu/packages/chromium.scm (ungoogled-chromium)
* gnu/packages/crates-gtk.scm (rust-atk-sys-0.14,
rust-atk-sys-0.10, rust-atk-0.14, rust-gtk-0.14)
* gnu/packages/gimp.scm (gimp)
* gnu/packages/gnome.scm (evince, glade3, clutter, totem, rhythmbox, mutter, ghex):
* gnu/packages/graphviz.scm (xdot)
* gnu/packages/gtk.scm (gtk+-2, gtk+, guile-gnome, atkmm)
* gnu/packages/mate.scm (mate-applets, atril, mate-control-center, mate-calc,
mate-utils, eom, pluma)
* gnu/packages/messaging.scm (dino)
* gnu/packages/qt.scm (qtwebengine-5)
* gnu/packages/rust-apps.scm (alfis)
* gnu/packages/vim.scm (vim-full)
* gnu/packages/vnc.scm (remmina)
* gnu/packages/web.scm (castor): Replace atk by at-spi2-core.

Signed-off-by: Guillaume Le Vaillant &lt;glv@posteo.net&gt;
</span></span></td><td>Josselin Poiret</td></tr>