Blame SOURCES/ghostscript-crash.patch
|
|
b7b1e5 |
diff -up ghostscript-9.10/psi/ialloc.c.crash ghostscript-9.10/psi/ialloc.c
|
|
|
b7b1e5 |
--- ghostscript-9.10/psi/ialloc.c.crash 2013-08-30 11:37:28.000000000 +0100
|
|
|
b7b1e5 |
+++ ghostscript-9.10/psi/ialloc.c 2014-06-04 10:47:58.294526685 +0100
|
|
|
b7b1e5 |
@@ -160,6 +160,7 @@ gs_alloc_ref_array(gs_ref_memory_t * mem
|
|
|
b7b1e5 |
uint num_refs, client_name_t cname)
|
|
|
b7b1e5 |
{
|
|
|
b7b1e5 |
ref *obj;
|
|
|
b7b1e5 |
+ int i;
|
|
|
b7b1e5 |
|
|
|
b7b1e5 |
/* If we're allocating a run of refs already, */
|
|
|
b7b1e5 |
/* and we aren't about to overflow the maximum run length, use it. */
|
|
|
b7b1e5 |
@@ -224,6 +225,9 @@ gs_alloc_ref_array(gs_ref_memory_t * mem
|
|
|
b7b1e5 |
cp->where = (ref_packed *)obj;
|
|
|
b7b1e5 |
}
|
|
|
b7b1e5 |
}
|
|
|
b7b1e5 |
+ for (i = 0; i < num_refs; i++) {
|
|
|
b7b1e5 |
+ make_null(&(obj[i]));
|
|
|
b7b1e5 |
+ }
|
|
|
b7b1e5 |
make_array(parr, attrs | mem->space, num_refs, obj);
|
|
|
b7b1e5 |
return 0;
|
|
|
b7b1e5 |
}
|