--- tetex-src-3.0/libs/xpdf/xpdf/Decrypt.cc.CAN-2005-0064 2004-01-22 02:26:45.000000000 +0100 +++ tetex-src-3.0/libs/xpdf/xpdf/Decrypt.cc 2005-02-08 10:09:10.899949464 +0100 @@ -135,6 +135,9 @@ GBool Decrypt::makeFileKey2(int encVersi int len, i, j; GBool ok; + // truncate keyLength when it won't fit tmpKey + keyLength = keyLength > sizeof(tmpKey) ? sizeof(tmpKey) : keyLength; + // generate file key buf = (Guchar *)gmalloc(68 + fileID->getLength()); if (userPassword) {