media-libs/libpng/files/libpng-1.2.21-off-by-one.patch


1
2
3
4
5
6
7
8
9
10
11
12
13
14

http://bugs.gentoo.org/194864
http://sourceforge.net/mailarchive/forum.php?thread_name=47067C84.7010205%40playstation.sony.com&forum_name=png-mng-implement
--- pngset.c
+++ pngset.c
@@ -690,7 +690,8 @@
       png_warning(png_ptr, "Insufficient memory to process iCCP chunk.");
       return;
    }
-   png_strncpy(new_iccp_name, name, png_strlen(new_iccp_name)+1);
+   png_strncpy(new_iccp_name, name, png_strlen(name));
+   new_iccp_name[png_strlen(name)+1]=0;
    new_iccp_profile = (png_charp)png_malloc_warn(png_ptr, proflen);
    if (new_iccp_profile == NULL)
    {