antiword-0.37-CVE-2014-8123.patch 528 B

123456789101112131415161718
  1. index 8a95fb9..7797d1f 100644
  2. --- a/wordole.c
  3. +++ b/wordole.c
  4. @@ -259,6 +259,11 @@ bGetPPS(FILE *pFile,
  5. }
  6. tNameSize = (size_t)usGetWord(0x40, aucBytes);
  7. tNameSize = (tNameSize + 1) / 2;
  8. + if (tNameSize >= sizeof(atPPSlist[0].szName)) {
  9. + werr(0, "PPS %d appears to be invalid.", iIndex);
  10. + atPPSlist = xfree(atPPSlist);
  11. + return FALSE;
  12. + }
  13. vName2String(atPPSlist[iIndex].szName, aucBytes, tNameSize);
  14. atPPSlist[iIndex].ucType = ucGetByte(0x42, aucBytes);
  15. if (atPPSlist[iIndex].ucType == 5) {
  16. --
  17. 2.1.2