libwmf.0.2.8.4-useafterfree.patch 486 B

12345678910
  1. --- libwmf-0.2.8.4/src/extra/gd/gd_clip.c.CVE-2009-1364-im-clip-list 2009-04-24 04:06:44.000000000 -0400
  2. +++ libwmf-0.2.8.4/src/extra/gd/gd_clip.c 2009-04-24 04:08:30.000000000 -0400
  3. @@ -70,6 +70,7 @@ void gdClipSetAdd(gdImagePtr im,gdClipRe
  4. { more = gdRealloc (im->clip->list,(im->clip->max + 8) * sizeof (gdClipRectangle));
  5. if (more == 0) return;
  6. im->clip->max += 8;
  7. + im->clip->list = more;
  8. }
  9. im->clip->list[im->clip->count] = (*rect);
  10. im->clip->count++;