Avoid parsing over the buffer limit, or interpreting non-hex as hex.
This still leaves parsing of lines longer than 300 chars unreliable.
Based on Qt5 patch for CVE-2020-17507.
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 9d7d238e9e)
If `_POSIX_THREAD_PRIORITY_SCHEDULING == 0`, it must be checked
with sysconf(_SC_THREAD_PRIORITY_SCHEDULING) at runtime.
Signed-off-by: OBATA Akio <obache@wizdas.com>
(cherry picked from commit d61a821ad0)
It should be either `path.right(path.length() - sep_pos - 1)` or
`path.mid(sep_pos + 1)`.
Signed-off-by: OBATA Akio <obache@wizdas.com>
(cherry picked from commit 30a7754971)
Change to find two XrandR header files from invidual directory.
"Xrandr.h" is in `libXrandr`, and "randr.h" is in `xorgproto` (used to be
`randrproto`) package, so they may be installed into different prefix.
Signed-off-by: OBATA Akio <obache@wizdas.com>
(cherry picked from commit bade711c82)
`info_ptr->channels` will be set in the next called `png_set_IHDR()`,
so it is no effect.
Signed-off-by: OBATA Akio <obache@wizdas.com>
(cherry picked from commit b00b5ea1c5)
`__RES` is usable to check release date of resolver library.
Such modern res API appeared in BIND-8.2.0 libbind with __RES == 19980901,
it was refrected as BIND-8.2.2-P5 in glibc in pre 2.3 release with
__RES == 19991006.
Signed-off-by: OBATA Akio <obache@wizdas.com>
(cherry picked from commit b676c7f90b)
The ppm format specifies that the maximum color value field must be
less than 65536. The handler did not enforce this, leading to
potentional overflow when the value was used in 16 bits context.
Based on Qt5 patch for CVE-2018-19872.
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit b08a6d71ba)
It resolves building with libc libraries
other than glibc - for example musl libc.
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit edad20d4f9)
in the Qt plugins directory, instead of the TDE plugins
directory, which cannot be known at Qt build time.
This resolves issue #3.
Signed-off-by: gregory guy <g-gregory@gmx.fr>
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 1ef55acbce)
Add desktop files for:
- assistant-qt3
- designer-qt3
- linguist-qt3
- qtconfig-qt3
These files have been made with the contribution of Laurent Dard's
patch (see bugzilla:639) with little change/addition from I.
Add 'sysshare' option to the configure script.
Signed-off-by: gregory guy <g-gregory@gmx.fr>
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 7c13f5df2f)
Make the decoder fail early to avoid spending time and memory on
attempting to decode a corrupt image file.
Based on Qt5 patch for CVE-2018-19873.
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit a00e43bd1c)
Since image files easily can be (or corrupt files claim to be) huge,
it is worth checking for out of memory situations.
Based on Qt5 patch for CVE-2018-19870.
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit a04cfea092)
This resolves bug 2991.
Thanks to Nikolaus Klepp for initial patch.
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit ee61bf8d1a)
Slávek Banko
OBATA Akio
Michele Calgaro
gregory guy
Roman Savochenko