File podofo-CVE-2018-12983.patch of Package podofo

Overview Repositories Revisions Requests Users Attributes Meta

File podofo-CVE-2018-12983.patch of Package podofo

diff -urp podofo-0.9.2.orig/src/base/PdfEncrypt.cpp podofo-0.9.2/src/base/PdfEncrypt.cpp
--- podofo-0.9.2.orig/src/base/PdfEncrypt.cpp	2022-09-06 16:33:36.148401581 -0500
+++ podofo-0.9.2/src/base/PdfEncrypt.cpp	2022-09-15 14:30:24.729580734 -0500
@@ -443,6 +443,12 @@ PdfEncrypt* PdfEncrypt::CreatePdfEncrypt
             && PdfEncrypt::IsEncryptionEnabled( ePdfEncryptAlgorithm_RC4V2 ) ) 
     {
         // [Alexey] - lLength is long long. Please make changes in encryption algorithms
+        // [mabri] - Fix CVE-2018-12983: Check key length lLength here
+        // to prevent stack-based buffer over-read in line 867 of this file
+        if (lLength > MD5_DIGEST_LENGTH * 8) // lLength in bits, md5 in bytes 
+        {
+            PODOFO_RAISE_ERROR_INFO( ePdfError_ValueOutOfRange, "Given key length too large for MD5." );
+        }
         pdfEncrypt = new PdfEncryptRC4(oValue, uValue, pValue, rValue, ePdfEncryptAlgorithm_RC4V2, static_cast<int>(lLength));
     }
     else if( (lV == 4L) && (rValue == 4L)

Places

File podofo-CVE-2018-12983.patch of Package podofo

Places