From 95acfdb02b8138040fea331deeab2f90e38a5dd9 Mon Sep 17 00:00:00 2001
From: Tim Waugh <twaugh@redhat.com>
Date: Tue, 8 Nov 2011 09:31:47 +0000
Subject: [PATCH] Applied fix for type 1 font copying code SEAC scanner (bug
 #728710).

---
 ghostscript-SEAC.patch | 17 +++++++++++++++++
 ghostscript.spec       |  9 ++++++++-
 2 files changed, 25 insertions(+), 1 deletion(-)
 create mode 100644 ghostscript-SEAC.patch

diff --git a/ghostscript-SEAC.patch b/ghostscript-SEAC.patch
new file mode 100644
index 0000000..a63f40d
--- /dev/null
+++ b/ghostscript-SEAC.patch
@@ -0,0 +1,17 @@
+diff -up ghostscript-9.04/base/gxtype1.c.SEAC ghostscript-9.04/base/gxtype1.c
+--- ghostscript-9.04/base/gxtype1.c.SEAC	2011-08-05 12:12:20.000000000 +0100
++++ ghostscript-9.04/base/gxtype1.c	2011-11-08 09:30:19.000262809 +0000
+@@ -409,7 +409,12 @@ gs_type1_piece_codes(/*const*/ gs_font_t
+             cnext;
+             goto out;
+         case c2_shortint:
+-            cip += 2;
++            {
++                short sint = *cip++;
++                sint = (sint << 8) + *cip++;
++                CS_CHECK_PUSH(csp, cstack);
++                *++csp = int2fixed(sint);
++            }
+             break;
+         case c2_hstemhm:
+             hhints += ((csp - cstack) + 1) / 2;
diff --git a/ghostscript.spec b/ghostscript.spec
index c624f60..e62475f 100644
--- a/ghostscript.spec
+++ b/ghostscript.spec
@@ -5,7 +5,7 @@ Summary: A PostScript interpreter and renderer
 Name: ghostscript
 Version: %{gs_ver}
 
-Release: 6%{?dist}
+Release: 7%{?dist}
 
 # Included CMap data is Redistributable, no modification permitted,
 # see http://bugzilla.redhat.com/487510
@@ -24,6 +24,7 @@ Patch5: ghostscript-runlibfileifexists.patch
 Patch6: ghostscript-cups-rgbw.patch
 Patch7: ghostscript-glyph-crash.patch
 Patch8: ghostscript-jbig2dec-nullderef.patch
+Patch9: ghostscript-SEAC.patch
 Patch10: ghostscript-cups-filters.patch
 Patch27: ghostscript-Fontmap.local.patch
 Patch28: ghostscript-iccprofiles-initdir.patch
@@ -132,6 +133,9 @@ rm -rf libpng zlib jpeg jasper expat
 # Applied patch to fix NULL dereference in JBIG2 decoder (bug #501710).
 %patch8 -p1 -b .jbig2dec-nullderef
 
+# Applied fix for type 1 font copying code SEAC scanner (bug #728710).
+%patch9 -p1 -b .SEAC
+
 # Install CUPS filter convs files in the correct place.
 %patch10 -p1 -b .cups-filters
 
@@ -339,6 +343,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/libgs.so
 
 %changelog
+* Tue Nov  8 2011 Tim Waugh <twaugh@redhat.com> 9.04-7
+- Applied fix for type 1 font copying code SEAC scanner (bug #728710).
+
 * Mon Nov  7 2011 Tim Waugh <twaugh@redhat.com> 9.04-6
 - Rebuilt for new libpng.