Sophie

Sophie

distrib > Mandriva > 2010.2 > x86_64 > by-pkgid > d10cab7ef0c5a97b414f3a17718af93d > files > 5

OpenEXR-1.6.1-5mdv2010.1.src.rpm

Fix freeing uninitialized pointers in Imf::hufUncompress, CVE-2009-1721.
--- a/IlmImf/ImfAutoArray.h
+++ b/IlmImf/ImfAutoArray.h
@@ -57,7 +57,7 @@ namespace Imf {
     {
       public:
 
-	 AutoArray (): _data (new T [size]) {}
+	 AutoArray (): _data (new T [size]) {memset(_data, 0, size * sizeof(T));}
 	~AutoArray () {delete [] _data;}
 
 	operator T * ()			{return _data;}