diff --git a/srcpkgs/pixman/patches/backport-0.42.2.patch b/srcpkgs/pixman/patches/backport-0.42.2.patch new file mode 100644 index 00000000000..29804fca86e --- /dev/null +++ b/srcpkgs/pixman/patches/backport-0.42.2.patch @@ -0,0 +1,29 @@ +From a1f88e842e0216a5b4df1ab023caebe33c101395 Mon Sep 17 00:00:00 2001 +From: Matt Turner +Date: Wed, 2 Nov 2022 12:07:32 -0400 +Subject: [PATCH] Avoid integer overflow leading to out-of-bounds write + +Thanks to Maddie Stone and Google's Project Zero for discovering this +issue, providing a proof-of-concept, and a great analysis. + +Closes: https://gitlab.freedesktop.org/pixman/pixman/-/issues/63 +--- + pixman/pixman-trap.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/pixman/pixman-trap.c b/pixman/pixman-trap.c +index 91766fd..7560405 100644 +--- a/pixman/pixman-trap.c ++++ b/pixman/pixman-trap.c +@@ -74,7 +74,7 @@ pixman_sample_floor_y (pixman_fixed_t y, + + if (f < Y_FRAC_FIRST (n)) + { +- if (pixman_fixed_to_int (i) == 0x8000) ++ if (pixman_fixed_to_int (i) == 0xffff8000) + { + f = 0; /* saturate */ + } +-- +GitLab + diff --git a/srcpkgs/pixman/template b/srcpkgs/pixman/template index eba3b82c9fa..8dd8cb63fa0 100644 --- a/srcpkgs/pixman/template +++ b/srcpkgs/pixman/template @@ -1,7 +1,7 @@ # Template file for 'pixman' pkgname=pixman version=0.40.0 -revision=1 +revision=2 build_style=meson # gtk is only necessary for demos, disabled to avoid dependency loop # openmp is only used in demos and tests, and things still test without it