Pixel manipulation library
b49f14e9cd
pixman < 0.42.2 is affected by an out-of-bounds write error in the
`rasterize_edges_8()` function due to an integer overflow in the
`pixman_sample_floor_y()` function.
For more information please check the upstream bug report [1].
This patch backports commit a1f88e842e02 ("Avoid integer overflow
leading to out-of-bounds write") [2] to fix CVE-2022-44638.
In order to test and validate the fix, a reproducer can be found in the
original bug report [3] and compiled with the following command:
$ gcc -o poc poc.c -ldl -fsanitize=address \
$(pkg-config --cflags --libs pixman-1)
[1] https://gitlab.freedesktop.org/pixman/pixman/-/issues/63
[2]
|
||
|---|---|---|
| .gitignore | ||
| 0001-Avoid-integer-overflow-leading-to-out-of-bounds-writ.patch | ||
| gating.yaml | ||
| make-pixman-snapshot.sh | ||
| pixman-0.34.0-vmx.patch | ||
| pixman.spec | ||
| sources | ||