From: Tobias Geerinckx-Rice <me@tobias.gr>
Date: Thu, 28 Feb 2019 20:29:00 +0100
Subject: [PATCH] netpbm: Fix CVE-2017-2586.

Copied verbatim from Debian[0].

[0]: https://sources.debian.org/data/main/n/netpbm-free/2:10.78.05-0.1/debian/patches/netpbm-CVE-2017-2586.patch

---
diff -urNp old/converter/other/svgtopam.c new/converter/other/svgtopam.c
--- old/converter/other/svgtopam.c	2017-02-08 12:11:02.593690917 +0100
+++ new/converter/other/svgtopam.c	2017-02-08 12:13:05.192846469 +0100
@@ -676,7 +676,7 @@ stringToUint(const char *   const string
 
     /* TODO: move this to nstring.c */
 
-    if (strlen(string) == 0)
+    if (string == NULL || strlen(string) == 0)
         pm_asprintf(errorP, "Value is a null string");
     else {
         char * tailptr;
'selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=186e516400d0676fcf50c653772cfe9ed3370db0'>refs</a><a class='active' href='/guix/log/gnu/packages/texinfo.scm'>log</a><a href='/guix/tree/gnu/packages/texinfo.scm?id=186e516400d0676fcf50c653772cfe9ed3370db0'>tree</a><a href='/guix/commit/gnu/packages/texinfo.scm?id=186e516400d0676fcf50c653772cfe9ed3370db0'>commit</a><a href='/guix/diff/gnu/packages/texinfo.scm?id=186e516400d0676fcf50c653772cfe9ed3370db0'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/texinfo.scm'>
<input type='hidden' name='id' value='186e516400d0676fcf50c653772cfe9ed3370db0'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=186e516400d0676fcf50c653772cfe9ed3370db0'>root</a>/<a href='/guix/log/gnu?id=186e516400d0676fcf50c653772cfe9ed3370db0'>gnu</a>/<a href='/guix/log/gnu/packages?id=186e516400d0676fcf50c653772cfe9ed3370db0'>packages</a>/<a href='/guix/log/gnu/packages/texinfo.scm?id=186e516400d0676fcf50c653772cfe9ed3370db0'>texinfo.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/texinfo.scm?id=186e516400d0676fcf50c653772cfe9ed3370db0&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-04-14 17:15:08 -0400'>2023-04-14</span></td><td><a href='/guix/commit/gnu/packages/texinfo.scm?id=3bacd3c76a58ebe70f98be654f09cbd4166093ab'>Merge branch 'master' into core-updates.</a><span class='msg-avail'>...<span class='msg-tooltip'>Conflicts:
	gnu/local.mk
	gnu/packages/build-tools.scm
	gnu/packages/certs.scm
	gnu/packages/check.scm
	gnu/packages/compression.scm
	gnu/packages/cups.scm
	gnu/packages/fontutils.scm
	gnu/packages/gnuzilla.scm
	gnu/packages/guile.scm
	gnu/packages/ibus.scm
	gnu/packages/image-processing.scm
	gnu/packages/linux.scm
	gnu/packages/music.scm
	gnu/packages/nss.scm
	gnu/packages/pdf.scm
	gnu/packages/python-xyz.scm
	gnu/packages/qt.scm
	gnu/packages/ruby.scm
	gnu/packages/shells.scm
	gnu/packages/tex.scm
	gnu/packages/video.scm
	gnu/packages/vulkan.scm
	gnu/packages/web.scm
	gnu/packages/webkit.scm
	gnu/packages/wm.scm
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2023-03-27 16:44:35 +0100'>2023-03-27</span></td><td><a href='/guix/commit/gnu/packages/texinfo.scm?id=da410b45a93c42b07c7ea6a514eafa5e7cf4e497'>gnu: texinfo: Update to 7.0.3</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/texinfo.scm (texinfo-7): Update to 7.0.3

Signed-off-by: Christopher Baines &lt;mail@cbaines.net&gt;
</span></span></td><td>Andy Tai</td></tr>
<tr><td><span title='2023-03-02 10:55:08 +0000'>2023-03-02</span></td><td><a href='/guix/commit/gnu/packages/texinfo.scm?id=7df09ee0ab3e7962ef27859ce87e06a323059284'>Merge remote-tracking branch 'savannah/master' into core-updates</a><span class='msg-avail'>...<span class='msg-tooltip'>Conflicts:
	gnu/local.mk
	gnu/packages/autotools.scm
	gnu/packages/cmake.scm
	gnu/packages/gnuzilla.scm
	gnu/packages/haskell.scm
	gnu/packages/pdf.scm
	gnu/packages/python-xyz.scm
	gnu/packages/samba.scm
	gnu/packages/tex.scm
	gnu/packages/tls.scm
	gnu/packages/wxwidgets.scm
</span></span></td><td>Christopher Baines</td></tr>
<tr><td><span title='2023-01-30 12:39:40 +0200'>2023-01-30</span></td><td><a href='/guix/commit/gnu/packages/texinfo.scm?id=4cf1acc7f3033b50b0bf19e02c9f522d522d338c'>Merge remote-tracking branch 'origin/master' into core-updates</a><span class='msg-avail'>...<span class='msg-tooltip'> Conflicts:
	doc/guix.texi
	gnu/local.mk
	gnu/packages/admin.scm
	gnu/packages/base.scm
	gnu/packages/chromium.scm
	gnu/packages/compression.scm
	gnu/packages/databases.scm
	gnu/packages/diffoscope.scm
	gnu/packages/freedesktop.scm
	gnu/packages/gnome.scm
	gnu/packages/gnupg.scm
	gnu/packages/guile.scm
	gnu/packages/inkscape.scm
	gnu/packages/llvm.scm
	gnu/packages/openldap.scm
	gnu/packages/pciutils.scm
	gnu/packages/ruby.scm
	gnu/packages/samba.scm
	gnu/packages/sqlite.scm
	gnu/packages/statistics.scm
	gnu/packages/syndication.scm
	gnu/packages/tex.scm
	gnu/packages/tls.scm
	gnu/packages/version-control.scm
	gnu/packages/xml.scm
	guix/build-system/copy.scm
	guix/scripts/home.scm
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2023-01-30 22:24:27 +0100'>2023-01-30</span></td><td><a href='/guix/commit/gnu/packages/texinfo.scm?id=29ee56d1fa6d43da31d44f66200a2760b46a46d1'>gnu: texinfo: Make 'perl-archive-zip' available to 'texi2any'.</a><span class='msg-avail'>...<span class='msg-tooltip'>This makes "texi2any --epub3" work out of the box.

Reported by BitPuffin on #guile.

* gnu/packages/texinfo.scm (texinfo-7)[inputs, arguments]: New fields.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2023-01-25 18:14:42 +0100'>2023-01-25</span></td><td><a href='/guix/commit/gnu/packages/texinfo.scm?id=cb141aaf677ecd1fc846999cf3d091c021d6655e'>gnu: texinfo: Update to 7.0.2.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/texinfo.scm (texinfo-7): Update to 7.0.2.
</span></span></td><td>Ludovic Courtès</td></tr>