Commit b2584a53 authored by Pino Toscano's avatar Pino Toscano

06_CVE-2010-0207.patch: use GooVector method available in 0.12.x

parent b0cce08b
......@@ -4,7 +4,9 @@ Description: Do not follow loops blindly
Fixes CVE-2010-0207.
.
Patch modified by keeping the readXRef and refXRefTable versions without the
additional GooVector parameter to avoid breaking API and ABI.
additional GooVector parameter to avoid breaking API and ABI, and using
operator[int] instead of at(int) with GooVector, as the former does not exist
in 0.12.x.
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=28172
Applied-Upstream: commit:9eda6e8aaae412a9882141d1b5b8c7bf0c823c68
Last-Update: 2012-06-27
......@@ -69,7 +71,7 @@ Last-Update: 2012-06-27
pos2 = (Guint)obj2.getInt();
- readXRef(&pos2);
+ for (uint i = 0; ok == gTrue && i < followedXRefStm->size(); ++i) {
+ if (followedXRefStm->at(i) == pos2) {
+ if ((*followedXRefStmi)[i] == pos2) {
+ ok = gFalse;
+ }
+ }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment