<html> <head> <base href="https://bugs.freedesktop.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Heap buffer overflow at cairo-truetype-subset.c:1299, CVE-2017-9814" href="https://bugs.freedesktop.org/show_bug.cgi?id=101547#c13">Comment # 13</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Heap buffer overflow at cairo-truetype-subset.c:1299, CVE-2017-9814" href="https://bugs.freedesktop.org/show_bug.cgi?id=101547">bug 101547</a> from <a class="email" href="mailto:bryce@osg.samsung.com" title="Bryce Harrington <bryce@osg.samsung.com>"> Bryce Harrington</a> <pre>Created <a href="attachment.cgi?id=139416" name="attach_139416" title="Convert boilerplate code to _cairo_malloc">attachment 139416</a> <a href="attachment.cgi?id=139416&action=edit" title="Convert boilerplate code to _cairo_malloc">[details]</a> <a href='page.cgi?id=splinter.html&bug=101547&attachment=139416'>[review]</a> Convert boilerplate code to _cairo_malloc Here's a shot at converting the remaining malloc()'s in boilerplate/ to use _cairo_malloc. I notice though that the boilerplate code has its own xmalloc() routine that calls exit() on error; I'm not certain whether or not that should be used here instead of _cairo_malloc?</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> </ul> </body> </html>