From 4d25b0f0195a9ea92c99439f6b033935171141e0 Mon Sep 17 00:00:00 2001 From: ktmarin <3300469404@qq.com> Date: Mon, 4 Dec 2023 02:47:23 +0800 Subject: [PATCH] =?UTF-8?q?CVE-2023-43115=20=E5=AE=89=E5=85=A8=E6=9B=B4?= =?UTF-8?q?=E6=96=B0=EF=BC=9A=E8=A7=A3=E5=86=B3ghostscript=E4=B8=ADgdevijs?= =?UTF-8?q?.c=E6=BC=8F=E6=B4=9E=E4=BB=A3=E7=A0=81=E9=97=AE=E9=A2=98.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- devices/gdevijs.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/devices/gdevijs.c b/devices/gdevijs.c index 3d337c5..2220388 100644 --- a/devices/gdevijs.c +++ b/devices/gdevijs.c @@ -938,6 +938,8 @@ gsijs_finish_copydevice(gx_device *dev, const gx_device *from_dev) if(code < 0) return code; + if (ijsdev->memory->gs_lib_ctx->core->path_control_active) + return_error(gs_error_invalidaccess); if (!ijsdev->ColorSpace) { ijsdev->ColorSpace = gs_malloc(ijsdev->memory, sizeof(rgb), 1, "gsijs_finish_copydevice"); @@ -1363,7 +1365,7 @@ gsijs_put_params(gx_device *dev, gs_param_list *plist) if (code >= 0) code = gsijs_read_string(plist, "IjsServer", ijsdev->IjsServer, sizeof(ijsdev->IjsServer), - dev->LockSafetyParams, is_open); + ijsdev->memory->gs_lib_ctx->core->path_control_active, is_open); if (code >= 0) code = gsijs_read_string_malloc(plist, "DeviceManufacturer", -- Gitee