Merge pull request from GHSA-pf5r-86w9-678h

raster-interpret.c: Fix CVE-2023-4504
OpenPrinting · Sep 20, 2023 · 515d31d · 515d31d
2 parents ee9f25a + a9a7daa
commit 515d31d
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/cups/raster-interpret.c b/cups/raster-interpret.c
@@ -1115,7 +1115,19 @@ scan_ps(_cups_ps_stack_t *st,		/* I  - Stack */
 
 	    cur ++;
 
-            if (*cur == 'b')
+	   /*
+	    * Return NULL if we reached NULL terminator, a lone backslash
+            * is not a valid character in PostScript.
+	    */
+
+	    if (!*cur)
+	    {
+	      *ptr = NULL;
+
+	      return (NULL);
+	    }
+
+	    if (*cur == 'b')
 	      *valptr++ = '\b';
 	    else if (*cur == 'f')
 	      *valptr++ = '\f';