diff options
author | Jay Berkenbilt <ejb@ql.org> | 2013-10-05 11:48:56 +0200 |
---|---|---|
committer | Jay Berkenbilt <ejb@ql.org> | 2013-10-10 01:50:07 +0200 |
commit | c2e91d8ec30838077191fac8303974f149b41c4f (patch) | |
tree | 48f5e0af432d08ee168593d39c44b509ac547373 /ChangeLog | |
parent | b9fe85be288e792da628ddb343acb259c47cc343 (diff) | |
download | qpdf-c2e91d8ec30838077191fac8303974f149b41c4f.tar.zst |
Security: keep cur_byte pointing into bytes array
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -1,3 +1,10 @@ +2013-10-05 Jay Berkenbilt <ejb@ql.org> + + * Security fix: in QUtil::toUTF8, change bounds checking to avoid + having a pointer point temporarily outside the bounds of an + array. Some compiler optimizations could have made the original + code unsafe. + 2013-07-10 Jay Berkenbilt <ejb@ql.org> * 5.0.0: release |