Bug#886721: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

Emilio Pozuelo Monfort pochu at debian.org
Tue Jan 9 10:57:30 UTC 2018


On 09/01/18 11:50, Chris Lamb wrote:
> [adding 886721 to CC]
> 
> Hi Emilio,
> 
>> g_uint64_checked_mul was introduced in glib 2.48, but wheezy has 2.32
> 
> JFTR that is here:
> 
>   https://developer.gnome.org/glib/stable/glib-Bounds-checked-integer-arithmetic.html#g-uint64-checked-mul
> 
>> The patch should be updated to do a manual overflow check.
> 
> Indeed. Does anyone have one handy?

You can do what glib does:

https://git.gnome.org/browse/glib/tree/glib/gtypes.h#n434

If you don't have the time now I can take a look at this later today.

Cheers,
Emilio



More information about the pkg-gnome-maintainers mailing list