1 files changed, 17 insertions, 0 deletions
diff --git a/graphics/gimp/patches/patch-bd b/graphics/gimp/patches/patch-bd
new file mode 100644
index 00000000000..29bcb3c1c52
--- /dev/null
+++ b/graphics/gimp/patches/patch-bd
@@ -0,0 +1,17 @@
+$NetBSD: patch-bd,v 1.1 2011/04/15 16:39:10 drochner Exp $
+
+CVE-2010-4543
+
+--- plug-ins/common/file-psp.c.orig	2010-07-02 22:51:56.000000000 +0000
++++ plug-ins/common/file-psp.c
+@@ -1244,6 +1244,10 @@ read_channel_data (FILE       *f,
+             }
+           else
+             fread (buf, runcount, 1, f);
++
++          /* prevent buffer overflow for bogus data */
++          runcount = MIN (runcount, endq - q);
++
+           if (bytespp == 1)
+             {
+               memmove (q, buf, runcount);