NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/mupdf: fix CVE-2021-4216

Browse Source 
A Floating point exception (division-by-zero) flaw was found in Mupdf
for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1
upstream.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
This commit is contained in:
Fabrice Fontaine 2022-11-06 14:38:21 +01:00 committed by Yann E. MORIN
parent 88d2135a7a
commit 3ddca0ccb9
2 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
package/mupdf/0005-Bug-704834-Fix-division-by-zero-for-zero-width-pages-in-muraster.patch Normal file
View File

@ -0,0 +1,29 @@
From 22c47acbd52949421f8c7cb46ea1556827d0fcbf Mon Sep 17 00:00:00 2001
From: Sebastian Rasmussen <sebras@gmail.com>
Date: Tue, 18 Jan 2022 20:33:10 +0100
Subject: [PATCH] Bug 704834: Fix division by zero for zero width pages in
muraster.
[Retrieved from:
https://github.com/ArtifexSoftware/mupdf/commit/22c47acbd52949421f8c7cb46ea1556827d0fcbf]
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
source/tools/muraster.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/source/tools/muraster.c b/source/tools/muraster.c
index c2ceb62f2e..97f4ae2633 100644
--- a/source/tools/muraster.c
+++ b/source/tools/muraster.c
@@ -1003,8 +1003,9 @@ initialise_banding(fz_context *ctx, render_details *render, int color)
w = render->ibounds.x1 - render->ibounds.x0;
min_band_mem = (size_t)bpp * w * min_band_height;
- reps = (int)(max_band_memory / min_band_mem);
- if (reps < 1)
+ if (min_band_mem > 0)
+ reps = (int)(max_band_memory / min_band_mem);
+ if (min_band_mem == 0 || reps < 1)
reps = 1;
/* Adjust reps to even out the work between threads */

3
package/mupdf/mupdf.mk
View File

@ -28,6 +28,9 @@ MUPDF_IGNORE_CVES += CVE-2021-3407
# 0003-Bug-703791-Stay-within-hash-table-max-key-size-in-cached-color-converter.patch
MUPDF_IGNORE_CVES += CVE-2021-37220
# 0005-Bug-704834-Fix-division-by-zero-for-zero-width-pages-in-muraster.patch
MUPDF_IGNORE_CVES += CVE-2021-4216
# The pkg-config name for gumbo-parser is `gumbo`.
MUPDF_PKG_CONFIG_PACKAGES = \
freetype2 \