From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 31109 invoked from network); 16 Jul 2021 08:17:41 -0000 Received: from localhost (HELO inbox.vuxu.org) (::1) by localhost with ESMTPUTF8; 16 Jul 2021 08:17:41 -0000 Content-Type: multipart/mixed; boundary="===============6700602550462682772==" MIME-Version: 1.0 Subject: =?utf8?q?Re=3A_=5BPR_PATCH=5D_=5BUpdated=5D_zathura=3A_backport_=28improved=29_upstream_patch_for_buffer_overflow?= To: ml@inbox.vuxu.org From: dkwo Reply-to: ml@inbox.vuxu.org In-Reply-To: References: Date: Fri, 16 Jul 2021 10:17:40 +0200 List-Id: Message-ID: <20210716081740.CMBRQYzDCQ3hKxaqeyB0Dw5AcFtHL-bXF_7ORMNfWgY@z> GitHub notification mails are now in MIME to allow UTF8. --===============6700602550462682772== Content-Type: text/plain; charset="utf8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlcmUgaXMgYW4gdXBkYXRlZCBwdWxsIHJlcXVlc3QgYnkgZGt3byBhZ2FpbnN0IG1hc3RlciBv biB0aGUgdm9pZC1wYWNrYWdlcyByZXBvc2l0b3J5CgpodHRwczovL2dpdGh1Yi5jb20vZGt3by92 b2lkLXBhY2thZ2VzIHphdG1pbgpodHRwczovL2dpdGh1Yi5jb20vdm9pZC1saW51eC92b2lkLXBh Y2thZ2VzL3B1bGwvMzE5ODkKCnphdGh1cmE6IGJhY2twb3J0IChpbXByb3ZlZCkgdXBzdHJlYW0g cGF0Y2ggZm9yIGJ1ZmZlciBvdmVyZmxvdwpUZXN0ZWQgb24geDg2XzY0LW11c2wsIGZpeGVzICMz MTcyMiAKCkEgcGF0Y2ggZmlsZSBmcm9tIGh0dHBzOi8vZ2l0aHViLmNvbS92b2lkLWxpbnV4L3Zv aWQtcGFja2FnZXMvcHVsbC8zMTk4OS5wYXRjaCBpcyBhdHRhY2hlZA== --===============6700602550462682772== Content-Type: text/x-diff MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="github-pr-zatmin-31989.patch" RnJvbSA2MTliNDBmZDQ3OWRjNGEzMGJiNjBkZjkzOTMwN2QxZmIwZWExN2EzIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBka3dvIDxuaWNvbG9waWF6emFsdW5nYUBnbWFpbC5jb20+CkRh dGU6IFRodSwgMTUgSnVsIDIwMjEgMjM6NDE6MzAgKzAyMDAKU3ViamVjdDogW1BBVENIXSB6YXRo dXJhOiBiYWNrcG9ydCAoaW1wcm92ZWQpIHVwc3RyZWFtIHBhdGNoIGZvciBidWZmZXIKIG92ZXJm bG93CgotLS0KIC4uLi96YXRodXJhL3BhdGNoZXMvZml4LWJ1ZmZlci1vdmVyZmxvdy5wYXRjaCB8 IDMxICsrKysrKysrKysrKysrKysrLS0KIHNyY3BrZ3MvemF0aHVyYS90ZW1wbGF0ZSAgICAgICAg ICAgICAgICAgICAgICB8ICAyICstCiAyIGZpbGVzIGNoYW5nZWQsIDMwIGluc2VydGlvbnMoKyks IDMgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvc3JjcGtncy96YXRodXJhL3BhdGNoZXMvZml4 LWJ1ZmZlci1vdmVyZmxvdy5wYXRjaCBiL3NyY3BrZ3MvemF0aHVyYS9wYXRjaGVzL2ZpeC1idWZm ZXItb3ZlcmZsb3cucGF0Y2gKaW5kZXggZjExYjM0M2IxODQ1Li45MDhiMDZiODdjNmYgMTAwNjQ0 Ci0tLSBhL3NyY3BrZ3MvemF0aHVyYS9wYXRjaGVzL2ZpeC1idWZmZXItb3ZlcmZsb3cucGF0Y2gK KysrIGIvc3JjcGtncy96YXRodXJhL3BhdGNoZXMvZml4LWJ1ZmZlci1vdmVyZmxvdy5wYXRjaApA QCAtMSw1ICsxLDkgQEAKK1Rha2VuIGZyb20gdXBzdHJlYW0KK2h0dHBzOi8vZ2l0LnB3bXQub3Jn L3B3bXQvemF0aHVyYS8tL2NvbW1pdC8yNzEzZGUyZjZjODEwZjVmMGJlM2MxNzk5NDQ4NjdiNWIw N2RkYWVkCit3aXRoIGEgc21hbGwgY29ycmVjdGlvbgorCiBkaWZmIC0tZ2l0IGEvemF0aHVyYS91 dGlscy5jIGIvemF0aHVyYS91dGlscy5jCi1pbmRleCBiNGIwNThmLi42ZTE5MTBlIDEwMDY0NAor aW5kZXggYjRiMDU4Zi4uMzVhYmQ2YiAxMDA2NDQKIC0tLSBhL3phdGh1cmEvdXRpbHMuYwogKysr IGIvemF0aHVyYS91dGlscy5jCiBAQCAtNDAxLDcgKzQwMSw3IEBAIHJlY3RhbmdsZV90b19wb2lu dHModm9pZCogdnJlY3QsIHZvaWQqIHZsaXN0KSB7CkBAIC03LDcgKzExLDMwIEBAIGluZGV4IGI0 YjA1OGYuLjZlMTkxMGUgMTAwNjQ0CiAgc3RhdGljIHZvaWQKICBhcHBlbmRfdW5pcXVlX3VpbnQo Z2lyYXJhX2xpc3RfdCogbGlzdCwgY29uc3QgdW5zaWduZWQgaW50IHYpIHsKIC0gIGRvdWJsZSog cCA9IGdfdHJ5X21hbGxvYyhzaXplb2YodikpOwotKyAgZG91YmxlKiBwID0gZ190cnlfbWFsbG9j KHNpemVvZigqcCkpOworKyAgdW5zaWduZWQgaW50KiBwID0gZ190cnlfbWFsbG9jKHNpemVvZiAq cCk7CiAgICBpZiAocCA9PSBOVUxMKSB7CiAgICAgIHJldHVybjsKICAgIH0KK0BAIC00MzMsMTYg KzQzMywxNiBAQCBjdXRfcmVjdGFuZ2xlKGNvbnN0IHphdGh1cmFfcmVjdGFuZ2xlX3QqIHJlY3Qs IGdpcmFyYV9saXN0X3QqIHBvaW50cywgZ2lyYXJhX2xpcworICAgR0lSQVJBX0xJU1RfRk9SRUFD SF9FTkQocG9pbnRzLCB6YXRodXJhX3BvaW50X3QqLCBpX3B0LCBwdCk7CisgCisgICBkb3VibGUg eCA9IHVmbG9vcihyZWN0LT54MSk7CistICBHSVJBUkFfTElTVF9GT1JFQUNIKHhzLCBjb25zdCBk b3VibGUqLCBpeCwgY3gpCisrICBHSVJBUkFfTElTVF9GT1JFQUNIKHhzLCBjb25zdCB1bnNpZ25l ZCBpbnQqLCBpeCwgY3gpCisgICAgIGRvdWJsZSB5ID0gdWZsb29yKHJlY3QtPnkxKTsKKy0gICAg R0lSQVJBX0xJU1RfRk9SRUFDSCh5cywgY29uc3QgZG91YmxlKiwgaXksIGN5KQorKyAgICBHSVJB UkFfTElTVF9GT1JFQUNIKHlzLCBjb25zdCB1bnNpZ25lZCBpbnQqLCBpeSwgY3kpCisgICAgICAg emF0aHVyYV9yZWN0YW5nbGVfdCogciA9IGdfdHJ5X21hbGxvYyhzaXplb2YoemF0aHVyYV9yZWN0 YW5nbGVfdCkpOworICAgICAgICpyID0gKHphdGh1cmFfcmVjdGFuZ2xlX3QpIHt4LCB5LCAqY3gs ICpjeX07CisgICAgICAgeSA9ICpjeTsKKyAgICAgICBnaXJhcmFfbGlzdF9hcHBlbmRfdW5pcXVl KHJlY3RhbmdsZXMsIGNtcF9yZWN0YW5nbGUsIHIpOworLSAgICBHSVJBUkFfTElTVF9GT1JFQUNI X0VORCh5cywgY29uc3QgZG91YmxlKiwgaXksIGN5KTsKKysgICAgR0lSQVJBX0xJU1RfRk9SRUFD SF9FTkQoeXMsIGNvbnN0IHVuc2lnbmVkIGludCosIGl5LCBjeSk7CisgICAgIHggPSAqY3g7Cist ICBHSVJBUkFfTElTVF9GT1JFQUNIX0VORCh4cywgY29uc3QgZG91YmxlKiwgaXgsIGN4KTsKKysg IEdJUkFSQV9MSVNUX0ZPUkVBQ0hfRU5EKHhzLCBjb25zdCB1bnNpZ25lZCBpbnQqLCBpeCwgY3gp OworIAorICAgZ2lyYXJhX2xpc3RfZnJlZSh4cyk7CisgICBnaXJhcmFfbGlzdF9mcmVlKHlzKTsK Ky0tIAorMi4yNi4yCmRpZmYgLS1naXQgYS9zcmNwa2dzL3phdGh1cmEvdGVtcGxhdGUgYi9zcmNw a2dzL3phdGh1cmEvdGVtcGxhdGUKaW5kZXggNTQ5NWMyMzVmZDk5Li41NGU4NjlmNTM5ZDAgMTAw NjQ0Ci0tLSBhL3NyY3BrZ3MvemF0aHVyYS90ZW1wbGF0ZQorKysgYi9zcmNwa2dzL3phdGh1cmEv dGVtcGxhdGUKQEAgLTEsNyArMSw3IEBACiAjIFRlbXBsYXRlIGZpbGUgZm9yICd6YXRodXJhJwog cGtnbmFtZT16YXRodXJhCiB2ZXJzaW9uPTAuNC43Ci1yZXZpc2lvbj0zCityZXZpc2lvbj00CiBi dWlsZF9zdHlsZT1tZXNvbgogY29uZmlndXJlX2FyZ3M9Ii1Ec3luY3RleD1lbmFibGVkIgogaG9z dG1ha2VkZXBlbmRzPSJwa2ctY29uZmlnIGludGx0b29sIHB5dGhvbjMtU3BoaW54IGRlc2t0b3At ZmlsZS11dGlscwo= --===============6700602550462682772==--