Sophie

Sophie

distrib > Mandriva > 2009.0 > x86_64 > by-pkgid > f53101e5e5a4d4cdc245bac4bfde3619 > files > 5

OpenEXR-1.6.1-3.1mdv2009.0.src.rpm

Fix freeing uninitialized pointers in Imf::hufUncompress, CVE-2009-1721.
--- a/IlmImf/ImfAutoArray.h
+++ b/IlmImf/ImfAutoArray.h
@@ -57,7 +57,7 @@ namespace Imf {
     {
       public:
 
-	 AutoArray (): _data (new T [size]) {}
+	 AutoArray (): _data (new T [size]) {memset(_data, 0, size * sizeof(T));}
 	~AutoArray () {delete [] _data;}
 
 	operator T * ()			{return _data;}