CVE-2018-19876.patch 849 B

12345678910111213141516171819202122232425262728293031323334
  1. CVE: CVE-2018-19876
  2. Upstream-Status: Backport
  3. Signed-off-by: Ross Burton <ross.burton@intel.com>
  4. From 90e85c2493fdfa3551f202ff10282463f1e36645 Mon Sep 17 00:00:00 2001
  5. From: Carlos Garcia Campos <cgarcia@igalia.com>
  6. Date: Mon, 19 Nov 2018 12:33:07 +0100
  7. Subject: [PATCH] ft: Use FT_Done_MM_Var instead of free when available in
  8. cairo_ft_apply_variations
  9. Fixes a crash when using freetype >= 2.9
  10. ---
  11. src/cairo-ft-font.c | 4 ++++
  12. 1 file changed, 4 insertions(+)
  13. diff --git a/src/cairo-ft-font.c b/src/cairo-ft-font.c
  14. index 325dd61b4..981973f78 100644
  15. --- a/src/cairo-ft-font.c
  16. +++ b/src/cairo-ft-font.c
  17. @@ -2393,7 +2393,11 @@ skip:
  18. done:
  19. free (coords);
  20. free (current_coords);
  21. +#if HAVE_FT_DONE_MM_VAR
  22. + FT_Done_MM_Var (face->glyph->library, ft_mm_var);
  23. +#else
  24. free (ft_mm_var);
  25. +#endif
  26. }
  27. }
  28. --
  29. 2.11.0