SecBSD's official ports repository

textproc/xpdf/patches/patch-xpdf_TextOutputDev_cc

@@ -0,0 +1,18 @@
+CVE-2019-16927, CVE-2019-9877 from 4.02
+
+Index: xpdf/TextOutputDev.cc
+--- xpdf/TextOutputDev.cc.orig
++++ xpdf/TextOutputDev.cc
+@@ -2472,6 +2472,12 @@ TextBlock *TextPage::split(GList *charsA, int rot) {
+ 
+   //----- compute the horizontal and vertical profiles
+ 
++  if (xMin / splitPrecision < 0.5 * INT_MIN ||
++      xMax / splitPrecision > 0.5 * INT_MAX ||
++      yMin / splitPrecision < 0.5 * INT_MIN ||
++      xMax / splitPrecision > 0.5 * INT_MAX) {
++    return NULL;
++  }
+   // add some slack to the array bounds to avoid floating point
+   // precision problems
+   xMinI = (int)floor(xMin / splitPrecision) - 1;