/[packages]/updates/5/evince/current/SOURCES/evince-3.14.2-CVE-2017-1000159.patch
ViewVC logotype

Contents of /updates/5/evince/current/SOURCES/evince-3.14.2-CVE-2017-1000159.patch

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1181596 - (show annotations) (download)
Wed Dec 6 22:31:19 2017 UTC (6 years, 4 months ago) by vaci0
File size: 928 byte(s)
BUG: 22131 fix Bug CVE-2017-1000159
1 diff -uNr evince-3.24.1/backend/dvi/dvi-document.c evince-3.24.1-diff/backend/dvi/dvi-document.c
2 --- evince-3.24.1/backend/dvi/dvi-document.c 2014-11-29 04:40:15.000000000 -0500
3 +++ evince-3.24.1-diff/backend/dvi/dvi-document.c 2017-12-06 11:40:48.032170116 -0500
4 @@ -300,11 +300,14 @@
5 gboolean success;
6
7 DviDocument *dvi_document = DVI_DOCUMENT(exporter);
8 + gchar* quoted_filename = g_shell_quote (dvi_document->context->filename);
9
10 - command_line = g_strdup_printf ("dvipdfm %s -o %s \"%s\"", /* dvipdfm -s 1,2,.., -o exporter_filename dvi_filename */
11 + command_line = g_strdup_printf ("dvipdfm %s -o %s %s", /* dvipdfm -s 1,2,.., -o exporter_filename dvi_filename */
12 dvi_document->exporter_opts->str,
13 dvi_document->exporter_filename,
14 - dvi_document->context->filename);
15 + quoted_filename);
16 + g_free (quoted_filename);
17 +
18
19 success = g_spawn_command_line_sync (command_line,
20 NULL,

  ViewVC Help
Powered by ViewVC 1.1.30