print/cups/patches/patch-bb

   1 $NetBSD: patch-bb,v 1.5 2010/06/16 18:18:26 drochner Exp $
   2
   3 --- cgi-bin/var.c.orig  2010-02-08 17:33:31.000000000 +0000
   4 +++ cgi-bin/var.c
   5 @@ -927,6 +927,9 @@ cgi_initialize_string(const char *data)
   6             * Read the hex code...
   7             */
   8
   9 +           if (!isxdigit(data[1] & 255) || !isxdigit(data[2] & 255))
  10 +               return (0);
  11 +
  12              if (s < (value + sizeof(value) - 1))
  13             {
  14                data ++;