Subject: CVS commit: [netbsd-4] xsrc
To: None <source-changes@NetBSD.org>
From: Manuel Bouyer <bouyer@netbsd.org>
List: source-changes
Date: 04/05/2007 21:27:08
Module Name:	xsrc
Committed By:	bouyer
Date:		Thu Apr  5 21:27:08 UTC 2007

Modified Files:
	xsrc/dist/freetype/src/bdf [netbsd-4]: bdflib.c
	xsrc/xfree/xc/extras/freetype2/src/bdf [netbsd-4]: bdflib.c

Log Message:
Pull up following revision(s) (requested by drochner in ticket #558):
	xfree/xc/extras/freetype2/src/bdf/bdflib.c: revision 1.3
	dist/freetype/src/bdf/bdflib.c: revision 1.2
pull in a patch from freetype CVS:
* src/bdf/bdflib.c (setsbit, sbitset): Handle values >= 128
  gracefully.
  (_bdf_set_default_spacing): Increase `name' buffer size to 256 and
  issue an error for longer names.
  (_bdf_parse_glyphs): Limit allowed number of glyphs in font to the
  number of code points in Unicode.
This fixes CVE-2007-1351.
Thanks tron for basic testing.


To generate a diff of this commit:
cvs rdiff -r1.1.1.1 -r1.1.1.1.4.1 xsrc/dist/freetype/src/bdf/bdflib.c
cvs rdiff -r1.2 -r1.2.4.1 xsrc/xfree/xc/extras/freetype2/src/bdf/bdflib.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.