[PATCH] fax: Three allocation-related arithmetic operations use attacker-influenced...
authorGeorge Karagiannidis <gbkaragiannidis@gmail.com>
Mon, 4 May 2026 21:00:56 +0000 (23:00 +0200)
committerMoritz Mühlenhoff <jmm@debian.org>
Mon, 8 Jun 2026 11:52:53 +0000 (13:52 +0200)
commitdfb95b31fc511a86956d1d569851a323de5ad2b2
tree8047b7e5e3ce9eff3554cc92286a2baeb911e63b
parent0836b2b08f2cf8873db29722ea847c79f20a8612
[PATCH] fax: Three allocation-related arithmetic operations use attacker-influenced dimensions without overflow checks:

From e5f088674223019fafac26800a2ae0c0d6afc85b Mon Sep 17 00:00:00 2001
From: George Karagiannidis <gbkaragiannidis@gmail.com>
Date: Mon, 4 May 2026 22:47:41 +0200
Subject: [PATCH] fax: The Ghostscript / PC Research fax header handling at
 line 109 performs

From 466786c354d890e39a3871f80ed686958d2513a2 Mon Sep 17 00:00:00 2001
From: George Karagiannidis <gbkaragiannidis@gmail.com>
Date: Mon, 4 May 2026 22:47:23 +0200
Subject: [PATCH] fax: A zero-byte .g3 file causes getstrip() to allocate a
 4-byte buffer

Gbp-Pq: Name fax-security.patch
generators/fax/faxdocument.cpp