14 lines
562 B
Diff
14 lines
562 B
Diff
diff -up ncurses-6.2-20210508/ncurses/tinfo/read_entry.c.cve-2023-29491 ncurses-6.2-20210508/ncurses/tinfo/read_entry.c
|
|
--- ncurses-6.2-20210508/ncurses/tinfo/read_entry.c.cve-2023-29491 2023-08-14 15:52:46.536461992 +0200
|
|
+++ ncurses-6.2-20210508/ncurses/tinfo/read_entry.c 2023-08-14 15:55:04.384426095 +0200
|
|
@@ -308,6 +308,9 @@ _nc_read_termtype(TERMTYPE2 *ptr, char *
|
|
|| bool_count < 0
|
|
|| num_count < 0
|
|
|| str_count < 0
|
|
+ || bool_count > BOOLCOUNT
|
|
+ || num_count > NUMCOUNT
|
|
+ || str_count > STRCOUNT
|
|
|| str_size < 0) {
|
|
returnDB(TGETENT_NO);
|
|
}
|