diff -Nru gtk+2.0-2.24.10/debian/changelog gtk+2.0-2.24.10/debian/changelog --- gtk+2.0-2.24.10/debian/changelog 2015-07-28 23:42:27.000000000 +0300 +++ gtk+2.0-2.24.10/debian/changelog 2015-09-22 09:52:25.000000000 +0300 @@ -1,3 +1,12 @@ +gtk+2.0 (2.24.10-0ubuntu6.3) precise; urgency=low + + * Non-maintainer upload. + * gdkcairo-Avoid-integer-overflow.patch: new patch. Cherry-pick upstream + commit from GTK+3 to avoid integer overflow when allocating a large block + of memory in gdk_cairo_set_source_pixbuf. + + -- Vlad Orlov Tue, 22 Sep 2015 09:51:11 +0300 + gtk+2.0 (2.24.10-0ubuntu6.2) precise; urgency=low * fix_gdk_event_apply_filters.patch: new patch. Makes gdk_event_apply_filters diff -Nru gtk+2.0-2.24.10/debian/patches/gdkcairo-Avoid-integer-overflow.patch gtk+2.0-2.24.10/debian/patches/gdkcairo-Avoid-integer-overflow.patch --- gtk+2.0-2.24.10/debian/patches/gdkcairo-Avoid-integer-overflow.patch 1970-01-01 03:00:00.000000000 +0300 +++ gtk+2.0-2.24.10/debian/patches/gdkcairo-Avoid-integer-overflow.patch 2015-09-22 09:53:01.000000000 +0300 @@ -0,0 +1,24 @@ +From 894b1ae76a32720f4bb3d39cf460402e3ce331d6 Mon Sep 17 00:00:00 2001 +From: Matthias Clasen +Date: Sat, 29 Jun 2013 22:06:54 -0400 +Subject: Avoid integer overflow + +Use g_malloc_n in gdk_cairo_set_source_pixbuf when allocating +a large block of memory, to avoid integer overflow. + +Pointed out by Bert Massop in +https://bugzilla.gnome.org/show_bug.cgi?id=703220 + +Index: gtk+2.0-2.24.10/gdk/gdkcairo.c +=================================================================== +--- gtk+2.0-2.24.10.orig/gdk/gdkcairo.c 2011-08-16 06:30:51.000000000 +0400 ++++ gtk+2.0-2.24.10/gdk/gdkcairo.c 2015-09-22 09:52:56.303088462 +0300 +@@ -210,7 +210,7 @@ + format = CAIRO_FORMAT_ARGB32; + + cairo_stride = cairo_format_stride_for_width (format, width); +- cairo_pixels = g_malloc (height * cairo_stride); ++ cairo_pixels = g_malloc_n (height, cairo_stride); + surface = cairo_image_surface_create_for_data ((unsigned char *)cairo_pixels, + format, + width, height, cairo_stride); diff -Nru gtk+2.0-2.24.10/debian/patches/series gtk+2.0-2.24.10/debian/patches/series --- gtk+2.0-2.24.10/debian/patches/series 2015-07-28 12:11:19.000000000 +0300 +++ gtk+2.0-2.24.10/debian/patches/series 2015-09-22 09:52:50.000000000 +0300 @@ -29,3 +29,4 @@ fix_gdk_event_apply_filters.patch gdk-Fix-GdkWindowFilter-internal-refcounting.patch gdkwindow-Fix-event-unref-iteration.patch +gdkcairo-Avoid-integer-overflow.patch