pixman-general.c: fix CVE-2015-5297 46/212246/1 accepted/tizen_5.5_unified accepted/tizen_5.5_unified_mobile_hotfix accepted/tizen_5.5_unified_wearable_hotfix tizen_5.5 tizen_5.5_mobile_hotfix tizen_5.5_tv tizen_5.5_wearable_hotfix tizen_bkup_20200220 accepted/tizen/5.5/unified/20191031.012933 accepted/tizen/5.5/unified/mobile/hotfix/20201027.071913 accepted/tizen/5.5/unified/wearable/hotfix/20201027.104454 accepted/tizen/unified/20190820.115111 submit/tizen/20190819.092133 submit/tizen_5.5/20191031.000008 submit/tizen_5.5_mobile_hotfix/20201026.185108 submit/tizen_5.5_wearable_hotfix/20201026.184308 tizen_5.5.m2_release
authorSung-Jin Park <sj76.park@samsung.com>
Mon, 19 Aug 2019 08:06:06 +0000 (17:06 +0900)
committerSung-Jin Park <sj76.park@samsung.com>
Mon, 19 Aug 2019 08:06:06 +0000 (17:06 +0900)
commit14addc01081ac76e1b8314e6fca6b24cd64fbcd2
treed3aad690cf682efa518560e0aac55d092498642a
parent2a3dc52535002d5691a1ac2a0cb5da2a75b48b25
pixman-general.c: fix CVE-2015-5297

Fix <https://bugs.freedesktop.org/show_bug.cgi?id=92027> whereby
an arithemitic overflow could occur while doing pointer arithmetic,
leading pixman to use an invalid address as the destination buffer.

Change-Id: I36ecde1abbe531a62e489ed854537a720b85f166
Signed-off-by: Sung-Jin Park <sj76.park@samsung.com>
pixman/pixman-general.c