From 69e4b63d9397337d17afb3751dd37c7924b6c3b2 Mon Sep 17 00:00:00 2001 From: Ralf Engels Date: Mon, 15 Apr 2019 09:51:05 -0400 Subject: Prevent buffer overflow in svg transformation reading; lp:1047524 --- src/svg/svg-affine.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/svg/svg-affine.cpp b/src/svg/svg-affine.cpp index adea723d0..928df1763 100644 --- a/src/svg/svg-affine.cpp +++ b/src/svg/svg-affine.cpp @@ -59,7 +59,7 @@ sp_svg_transform_read(gchar const *str, Geom::Affine *transform) if (str[idx] != '(') return false; idx++; - for (n_args = 0; ; n_args++) { + for (n_args = 0; n_args < 6; n_args++) { char c; char *end_ptr; -- cgit v1.2.3