Fix CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
Adapted for upstream pixman based on:

  https://hg.mozilla.org/releases/mozilla-esr45/rev/5e39c1c2fded

--- pixman-0.34.0/pixman/pixman-edge-imp.h.orig	2015-06-30 05:48:31.000000000 -0400
+++ pixman-0.34.0/pixman/pixman-edge-imp.h	2016-11-16 01:09:34.046335106 -0500
@@ -55,8 +55,9 @@
 	 *
 	 * (The AA case does a similar  adjustment in RENDER_SAMPLES_X)
 	 */
-	lx += X_FRAC_FIRST(1) - pixman_fixed_e;
-	rx += X_FRAC_FIRST(1) - pixman_fixed_e;
+	/* we cast to unsigned to get defined behaviour for overflow */
+	lx = (unsigned)lx + X_FRAC_FIRST(1) - pixman_fixed_e;
+	rx = (unsigned)rx + X_FRAC_FIRST(1) - pixman_fixed_e;
 #endif
 	/* clip X */
 	if (lx < 0)
option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=7949c140b10184f82247ea10fbbb344ecd097924'>refs</a><a class='active' href='/guix/log/gnu/packages/gps.scm'>log</a><a href='/guix/tree/gnu/packages/gps.scm?id=7949c140b10184f82247ea10fbbb344ecd097924'>tree</a><a href='/guix/commit/gnu/packages/gps.scm?id=7949c140b10184f82247ea10fbbb344ecd097924'>commit</a><a href='/guix/diff/gnu/packages/gps.scm?id=7949c140b10184f82247ea10fbbb344ecd097924'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/gps.scm'>
<input type='hidden' name='id' value='7949c140b10184f82247ea10fbbb344ecd097924'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=7949c140b10184f82247ea10fbbb344ecd097924'>root</a>/<a href='/guix/log/gnu?id=7949c140b10184f82247ea10fbbb344ecd097924'>gnu</a>/<a href='/guix/log/gnu/packages?id=7949c140b10184f82247ea10fbbb344ecd097924'>packages</a>/<a href='/guix/log/gnu/packages/gps.scm?id=7949c140b10184f82247ea10fbbb344ecd097924'>gps.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/gps.scm?id=7949c140b10184f82247ea10fbbb344ecd097924&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2018-02-06 15:50:09 +0100'>2018-02-06</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=924b96db0aecc9f0b0bcd21165b5d5ea47199e29'>gnu: gpsbabel: Update to 1.5.4 and fix build.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2018-02-06 15:50:04 +0100'>2018-02-06</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=53655964767b17d5014543b1ac34ddc613e641a6'>gnu: Add gpxsee.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2018-02-03 21:39:54 +0100'>2018-02-03</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=03392caace9a56878acc0994571c9011d087588d'>gnu: gpsbabel: Add missing module.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2018-01-15 07:28:47 +0100'>2018-01-15</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=6d2ff64584f7fd2835f03148cbef87964a628999'>gnu: gpsbabel: Complete licencing information.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2018-01-15 07:28:43 +0100'>2018-01-15</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=facee7941fb4f7430deea329da4705b8858b2c9f'>gnu: gpsbabel: Use HTTPS for home page.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-11-27 22:18:27 +0200'>2017-11-27</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=b200ecdeb2ba97bcaeec04a4da5e31736f00a5ea'>gnu: Add gama.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2017-09-20 20:58:04 -0400'>2017-09-20</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=dc1d3cdef70f0e3c047c229c2a0e561d1f47bde8'>gnu: Use 'modify-phases' syntax.</a><span class='msg-avail'>...</span></td><td>Kei Kebreau</td></tr>
<tr><td><span title='2017-03-22 17:04:46 -0400'>2017-03-22</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=e20dafd0a12e2f9098479e3087fb216d510cd058'>gnu: gpsbabel: Fix a build failure with GCC 5.</a><span class='msg-avail'>...</span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2016-12-04 17:39:48 +0300'>2016-12-04</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=023f0fb06ee8dd55f95ff1be542e805363535b97'>gnu: exiv2: Move to (gnu packages image).</a><span class='msg-avail'>...</span></td><td>Alex Kost</td></tr>
<tr><td><span title='2016-08-22 01:49:52 +0200'>2016-08-22</span></td><td><a href='/guix/commit/gnu/packages/gps.scm?id=15354d86ce8b51ed467a2e8cda5c9710c30ea1fa'>gnu: gpsbabel: Build with gnu++11.</a><span class='msg-avail'>...</span></td><td>David Craven</td></tr>
ter' into core-updates</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2017-03-30 01:30:16 +0200'>2017-03-30</span></td><td><a href='/guix/commit/gnu/packages/gettext.scm?id=6fd52309b8f52c9bb59fccffac53e029ce94b698'>gnu: Use HTTPS for almost all gnu.org HOME-PAGEs.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-03-26 11:06:46 +0200'>2017-03-26</span></td><td><a href='/guix/commit/gnu/packages/gettext.scm?id=727bec13a35049f5f819a6f22d93e38aa44220b2'>gnu: po4a: Make manpages writable before resetting timestamps.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>