From: Tobias Geerinckx-Rice <me@tobias.gr>
Date: Thu, 28 Feb 2019 20:29:00 +0100
Subject: [PATCH] netpbm: Fix CVE-2017-2587.

Copied verbatim from Debian[0].

[0]: https://sources.debian.org/data/main/n/netpbm-free/2:10.78.05-0.1/debian/patches/netpbm-CVE-2017-2587.patch

---
diff -urNp old/converter/other/svgtopam.c new/converter/other/svgtopam.c
--- old/converter/other/svgtopam.c	2017-02-08 12:11:02.593690917 +0100
+++ new/converter/other/svgtopam.c	2017-02-08 13:49:38.319029371 +0100
@@ -771,12 +771,17 @@ createCanvas(unsigned int const width,
 
     MALLOCVAR_NOFAIL(canvasP);
 
-    canvasP->width  = width;
-    canvasP->height = height;
-    canvasP->pixels = ppm_allocarray(width, height);
-    canvasP->maxval = maxval;
+    if(canvasP != NULL){
+        canvasP->width  = width;
+        canvasP->height = height;
+        canvasP->pixels = ppm_allocarray(width, height);
+        canvasP->maxval = maxval;
+
+        *canvasPP = canvasP;
+    } else {
+       pm_error("can't allocate memory for canvas");
+    }
 
-    *canvasPP = canvasP;
 }
 
 
r><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=560062aaeabb485e7f53f8f5e6449b9a35aa9ca2'>refs</a><a class='active' href='/guix/log/gnu/packages/julia.scm'>log</a><a href='/guix/tree/gnu/packages/julia.scm?id=560062aaeabb485e7f53f8f5e6449b9a35aa9ca2'>tree</a><a href='/guix/commit/gnu/packages/julia.scm?id=560062aaeabb485e7f53f8f5e6449b9a35aa9ca2'>commit</a><a href='/guix/diff/gnu/packages/julia.scm?id=560062aaeabb485e7f53f8f5e6449b9a35aa9ca2'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/julia.scm'>
<input type='hidden' name='id' value='560062aaeabb485e7f53f8f5e6449b9a35aa9ca2'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=560062aaeabb485e7f53f8f5e6449b9a35aa9ca2'>root</a>/<a href='/guix/log/gnu?id=560062aaeabb485e7f53f8f5e6449b9a35aa9ca2'>gnu</a>/<a href='/guix/log/gnu/packages?id=560062aaeabb485e7f53f8f5e6449b9a35aa9ca2'>packages</a>/<a href='/guix/log/gnu/packages/julia.scm?id=560062aaeabb485e7f53f8f5e6449b9a35aa9ca2'>julia.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/julia.scm?id=560062aaeabb485e7f53f8f5e6449b9a35aa9ca2&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2024-02-05 13:56:31 +0800'>2024-02-05</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=2b296427d7bd7b6b155e0e94403c1227ce014008'>gnu: mbedtls-apache: Rename to mbedtls-lts.</a></td><td>Hilton Chain</td></tr>
<tr><td><span title='2023-09-28 13:48:32 +0300'>2023-09-28</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=16bc2f3609facce36de3c1b135cac4a5a87f99a7'>gnu: julia: Conditionally use openblas with ILP64 support.</a></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2023-04-14 17:14:51 +0200'>2023-04-14</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=1e28aed2eb7049c8a40092071ac1ca1142869b6d'>gnu: julia: Fix test suite regression.</a></td><td>Simon Tournier</td></tr>
<tr><td><span title='2023-02-12 01:00:00 +0100'>2023-02-12</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=0fbff222c49b1807fae2089b1462fa6e9aefb79f'>gnu: julia: Fix build.</a></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2023-02-09 16:48:41 +0200'>2023-02-09</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=1750d68309e26293c2da5aad953a061867f2cb14'>gnu: julia: Use SSL_CERT_FILE for SSL certificates.</a></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2022-12-08 19:53:16 +0200'>2022-12-08</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=02d591206259b30462764cb2f978ae214dea0449'>gnu: julia: Update to 1.8.3.</a></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2022-12-08 19:52:54 +0200'>2022-12-08</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=7d8f92dd87e6f13ec6b87744c3db9bb3be541707'>gnu: julia: Make libquadmath optional.</a></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2022-12-08 19:52:54 +0200'>2022-12-08</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=d521c2dcbaf9e13a8d95569032b203353a766b1f'>gnu: julia: Also skip tests when cross-compiling.</a></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2022-08-28 21:42:10 +0300'>2022-08-28</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=20fb55364e6e8684c08110af547de141bd363c67'>gnu: libunwind-julia: Skip tests.</a></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2022-08-23 21:35:03 +0300'>2022-08-23</span></td><td><a href='/guix/commit/gnu/packages/julia.scm?id=90ca0f57bf9664e195bbb896ff3a17d89bd62f05'>gnu: julia: Update to 1.6.7.</a></td><td>Jean-Baptiste Volatier</td></tr>