1Upstream-Status: Pending
2
3
4http://cvs.fedoraproject.org/viewvc/devel/libwmf/libwmf-0.2.8.4-useafterfree.patch?view=log
5Resolves: CVE-2009-1364
6
7--- libwmf-0.2.8.4/src/extra/gd/gd_clip.c.CVE-2009-1364-im-clip-list	2009-04-24 04:06:44.000000000 -0400
8+++ libwmf-0.2.8.4/src/extra/gd/gd_clip.c	2009-04-24 04:08:30.000000000 -0400
9@@ -70,6 +70,7 @@ void gdClipSetAdd(gdImagePtr im,gdClipRe
10 	{	more = gdRealloc (im->clip->list,(im->clip->max + 8) * sizeof (gdClipRectangle));
11 		if (more == 0) return;
12 		im->clip->max += 8;
13+                im->clip->list = more;
14 	}
15 	im->clip->list[im->clip->count] = (*rect);
16 	im->clip->count++;
17