mirror of
https://git.yoctoproject.org/poky
synced 2026-07-27 19:37:10 +00:00
Hongxu Jia
c0f6e29c21
(From OE-Core rev: b6d32d43fd2b016e932b7dc81fb943eb936b73bb) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
36 lines
1.8 KiB
Diff
36 lines
1.8 KiB
Diff
From ee9e8065e7d7b3adbc25fd655727ca72861ee032 Mon Sep 17 00:00:00 2001
|
|
From: Ken Sharp <ken.sharp@artifex.com>
|
|
Date: Fri, 24 Aug 2018 12:44:26 +0100
|
|
Subject: [PATCH 4/5] Hide the .shfill operator
|
|
|
|
Commit 0b6cd1918e1ec4ffd087400a754a845180a4522b was supposed to make
|
|
the .shfill operator unobtainable, but I accidentally left a comment
|
|
in the line doing so.
|
|
|
|
Fix it here, without this the operator can still be exploited.
|
|
|
|
CVE: CVE-2018-15909
|
|
Upstream-Status: Backport [git://git.ghostscript.com/ghostpdl.git]
|
|
|
|
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
|
|
---
|
|
Resource/Init/gs_init.ps | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/Resource/Init/gs_init.ps b/Resource/Init/gs_init.ps
|
|
index 1956ed5..955b843 100644
|
|
--- a/Resource/Init/gs_init.ps
|
|
+++ b/Resource/Init/gs_init.ps
|
|
@@ -2182,7 +2182,7 @@ SAFER { .setsafeglobal } if
|
|
/.oserrno /.setoserrno /.oserrorstring /.getCPSImode
|
|
/.getscanconverter /.setscanconverter /.type1encrypt /.type1decrypt/.languagelevel /.setlanguagelevel /.eqproc /.fillpage /.buildpattern1 /.saslprep
|
|
/.buildshading1 /.buildshading2 /.buildshading3 /.buildshading4 /.buildshading5 /.buildshading6 /.buildshading7 /.buildshadingpattern
|
|
-%/.shfill /.argindex /.bytestring /.namestring /.stringbreak /.stringmatch /.globalvmarray /.globalvmdict /.globalvmpackedarray /.globalvmstring
|
|
+/.shfill /.argindex /.bytestring /.namestring /.stringbreak /.stringmatch /.globalvmarray /.globalvmdict /.globalvmpackedarray /.globalvmstring
|
|
/.localvmarray /.localvmdict /.localvmpackedarray /.localvmstring /.systemvmarray /.systemvmdict /.systemvmpackedarray /.systemvmstring /.systemvmfile /.systemvmlibfile
|
|
/.systemvmSFD /.settrapparams /.currentsystemparams /.currentuserparams /.getsystemparam /.getuserparam /.setsystemparams /.setuserparams
|
|
/.checkpassword /.locale_to_utf8 /.currentglobal /.gcheck /.imagepath
|
|
--
|
|
2.8.1
|
|
|