Commit 67c5a500154144def9ace0388d6ac09981eb013a - unrtf

Need to process word chars as unsigned. Else char with hi bit set can crash program Partially fixes CVE-2014-9275, according to https://lists.gnu.org/archive/html/bug-unrtf/2014-12/msg00001.html Origin: https://bitbucket.org/medoc/unrtf-int/commits/1df886f2e65f7c512a6217588ae8d94d4bcbc63d/raw/ Bug-Debian: http://bugs.debian.org/772811 Jean-Francois Dockes authored 9 years ago Willi Mann committed 9 years ago

1 changed file(s) with 2 addition(s) and 2 deletion(s). Raw diff Collapse all Expand all

-2

hash.c less more

120	120
121	121	hi->str = my_strdup(str);
122	122
123		i = *str;
124		if (i=='\\') i=str[1];
	123	i = (unsigned char)*str;
	124	if (i=='\\') i=(unsigned char)str[1];
125	125	i <<= 24;
126	126	hi->value = i \| (hash_value++ & 0xffffff);
127	127	hi->next = NULL;