[cairo-bugs] [Bug 63045] Crash in cairo_fill_preserve after cairo_arc call

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Tue May 8 02:11:38 UTC 2018


https://bugs.freedesktop.org/show_bug.cgi?id=63045

--- Comment #6 from Bryce Harrington <bryce at osg.samsung.com> ---
I found this patch associated with the CVE:

https://bug825721.bmoattachments.org/attachment.cgi?id=729347

However the code has changed considerably since then.  The checks might still
be relevant in cairo-image-compositor.c such as in fill_boxes(), possibly other
places, but I'm not certain.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.cairographics.org/archives/cairo-bugs/attachments/20180508/c9a45e1e/attachment.html>


More information about the cairo-bugs mailing list