After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 762029 - pinpoint is affected by CVE-2013-7447
pinpoint is affected by CVE-2013-7447
Status: RESOLVED WONTFIX
Product: pinpoint
Classification: Other
Component: general
0.1.x
Other Linux
: Normal normal
: ---
Assigned To: Pinpoint maintainer(s)
Pinpoint maintainer(s)
gnome[unmaintained]
Depends on:
Blocks:
 
 
Reported: 2016-02-14 12:30 UTC by Pacho Ramos
Modified: 2018-08-17 19:57 UTC
See Also:
GNOME target: ---
GNOME version: ---

Attachments
Avoid integer overflow (1.17 KB, patch)
2017-08-05 18:49 UTC, Ludovico de Nittis 		none Details | Review

Description Pacho Ramos 2016-02-14 12:30:00 UTC 
As reported in:
https://bugs.gentoo.org/show_bug.cgi?id=574372
https://bugs.gentoo.org/show_bug.cgi?id=574384

It is affected by CVE-2013-7447 (bug #703220). In 0.1.8 I see:
$ grep -r "cairo_pixels" -- *
pp-cairo.c:  guchar          *cairo_pixels;
pp-cairo.c:  cairo_pixels = g_malloc (height * cairo_stride);
pp-cairo.c:  surface = cairo_image_surface_create_for_data ((unsigned char *)cairo_pixels,
pp-cairo.c:			       cairo_pixels, (cairo_destroy_func_t)g_free);
pp-cairo.c:      guchar *q = cairo_pixels;
pp-cairo.c:      cairo_pixels += cairo_stride;
Comment 1 Ludovico de Nittis 2017-08-05 18:49:07 UTC 
Created attachment 357028 [details] [review]
Avoid integer overflow

This patch should fix the possible integer overflow.
Comment 2 André Klapper 2018-08-17 19:57:31 UTC 
pinpoint is not under active development anymore since 2015.
Its codebase has been archived:
https://gitlab.gnome.org/Archive/pinpoint/commits/master

Closing this report as WONTFIX as part of Bugzilla Housekeeping to reflect
reality. Please feel free to reopen this ticket (or rather transfer the project
to GNOME Gitlab, as GNOME Bugzilla is deprecated) if anyone takes the
responsibility for active development again.