diff options
| author | Ralf Engels <ralf-engels@gmx.de> | 2019-04-15 13:51:05 +0000 |
|---|---|---|
| committer | Martin Owens <doctormo@gmail.com> | 2019-04-15 13:51:05 +0000 |
| commit | 69e4b63d9397337d17afb3751dd37c7924b6c3b2 (patch) | |
| tree | 9de0dab5d07ac5a329851d3c01e46b64a6d91b15 /src/svg/svg-affine.cpp | |
| parent | Make sure Layout.wrap_mode is initialized and defined. (diff) | |
| download | inkscape-69e4b63d9397337d17afb3751dd37c7924b6c3b2.tar.gz inkscape-69e4b63d9397337d17afb3751dd37c7924b6c3b2.zip | |
Prevent buffer overflow in svg transformation reading; lp:1047524
Diffstat (limited to 'src/svg/svg-affine.cpp')
| -rw-r--r-- | src/svg/svg-affine.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/svg/svg-affine.cpp b/src/svg/svg-affine.cpp index adea723d0..928df1763 100644 --- a/src/svg/svg-affine.cpp +++ b/src/svg/svg-affine.cpp @@ -59,7 +59,7 @@ sp_svg_transform_read(gchar const *str, Geom::Affine *transform) if (str[idx] != '(') return false; idx++; - for (n_args = 0; ; n_args++) { + for (n_args = 0; n_args < 6; n_args++) { char c; char *end_ptr; |