diff options
author | Bryan Ferris <bferris@google.com> | 2020-04-30 19:52:54 +0000 |
---|---|---|
committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2020-04-30 19:52:54 +0000 |
commit | ec1d84749a5fd324539e0ddc991359d348800aae (patch) | |
tree | 1538cef08e973378a87667f7833291c42e2d0d68 | |
parent | 4db92ec1c7b90711709552e62011fb3316a6db0e (diff) | |
parent | db773ddf766d53b12e77f29d92eaa37c0dcf9fa8 (diff) | |
download | libcups-android-11.0.0_r31.tar.gz |
Fix bounds check in ipp am: 239ddbfc0c am: db773ddf76android-11.0.0_r48android-11.0.0_r47android-11.0.0_r46android-11.0.0_r45android-11.0.0_r44android-11.0.0_r43android-11.0.0_r42android-11.0.0_r41android-11.0.0_r40android-11.0.0_r39android-11.0.0_r38android-11.0.0_r37android-11.0.0_r36android-11.0.0_r35android-11.0.0_r34android-11.0.0_r33android-11.0.0_r32android-11.0.0_r31android-11.0.0_r30android-11.0.0_r29android-11.0.0_r28android-11.0.0_r27android-11.0.0_r26android-11.0.0_r24android-11.0.0_r23android-11.0.0_r22android-11.0.0_r21android-11.0.0_r20android-11.0.0_r19android-11.0.0_r18android11-qpr3-s1-releaseandroid11-qpr3-releaseandroid11-qpr2-releaseandroid11-qpr1-s2-releaseandroid11-qpr1-s1-releaseandroid11-qpr1-releaseandroid11-qpr1-d-s1-releaseandroid11-qpr1-d-releaseandroid11-qpr1-c-releaseandroid11-d2-release
Change-Id: I9d433855d60eee335b02f5631789416ce8ae480f
-rw-r--r-- | README.version | 1 | ||||
-rw-r--r-- | cups/ipp.c | 2 |
2 files changed, 2 insertions, 1 deletions
diff --git a/README.version b/README.version index c2baa557..5a727df8 100644 --- a/README.version +++ b/README.version @@ -6,4 +6,5 @@ CUPS is the standards-based, open source printing system developed by Apple Inc. Local Modifications: Fix for CVE-2020-3898 (I1e4988e753c0ed1df43937b3009fd62ecd81ccc0) + Fix for CVE-2019-8842 (Ib3d4260899941f0c8050cf6d77a9022db63bdc66) Use boringSSL @@ -2960,7 +2960,7 @@ ippReadIO(void *src, /* I - Data source */ * Read 32-bit "extension" tag... */ - if ((*cb)(src, buffer, 4) < 1) + if ((*cb)(src, buffer, 4) < 4) { DEBUG_puts("1ippReadIO: Callback returned EOF/error"); _cupsBufferRelease((char *)buffer); |