Pixel manipulation library
046693e14b
pixman < 0.42.2 is affected by an out-of-bounds write error in the
`rasterize_edges_8()` function due to an integer overflow in the
`pixman_sample_floor_y()` function.
For more information please check the upstream bug report [1].
This patch backports commit a1f88e842e02 ("Avoid integer overflow
leading to out-of-bounds write") [2] to fix CVE-2022-44638.
In order to test and validate the fix, a reproducer can be found in the
original bug report [3] and compiled with the following command:
$ gcc -o poc poc.c -ldl -fsanitize=address \
$(pkg-config --cflags --libs pixman-1)
[1] https://gitlab.freedesktop.org/pixman/pixman/-/issues/63
[2]
|
||
|---|---|---|
| .gitignore | ||
| 0001-Avoid-integer-overflow-leading-to-out-of-bounds-writ.patch | ||
| 0001-Fix-bilinear-filter-computation-in-wide-pipeline.patch | ||
| 0001-Initialize-temporary-buffers-in-general_composite_re.patch | ||
| gating.yaml | ||
| make-pixman-snapshot.sh | ||
| pixman.spec | ||
| sources | ||