Attached is a unified format patch which should copy strings correctly within their allocated buffers, for many fields in the BDF file format, including CHARSET_REGISTRY.
I have tested FontForge before and after the patch; it does not crash predictably anymore. ** Patch added: "fix for CVE-2010-4259 crash" https://bugs.launchpad.net/ubuntu/+source/fontforge/+bug/684952/+attachment/1754634/+files/cve-2010-4259.patch ** Visibility changed to: Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/684952 Title: Stack buffer overflow in BDF file parsing -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
