emacs-elpa-diffs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[elpa] externals/auctex 837d590 27/42: Remove use of .runandhide operato


From: Tassilo Horn
Subject: [elpa] externals/auctex 837d590 27/42: Remove use of .runandhide operator
Date: Thu, 23 Nov 2017 06:06:13 -0500 (EST)

branch: externals/auctex
commit 837d590008c1dd4e92ffbce15008efb761d11f7c
Author: David Kastrup <address@hidden>
Commit: David Kastrup <address@hidden>

    Remove use of .runandhide operator
    
    Ghostscript bug 698680
    <https://bugs.ghostscript.com/show_bug.cgi?id=698680> has been caused
    by the removal of the .runandhide operator in Ghostscript 9.22
    upstream.  Since .runandhide has no longer been used in a
    security-critical manner, its operation can be emulated by storing the
    respective information in a .preview-ST variable.  Potentially
    malicious code would not be able to retrieve a non-safe "save" object
    from here.
---
 preview.el.in | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/preview.el.in b/preview.el.in
index d113721..6685341 100644
--- a/preview.el.in
+++ b/preview.el.in
@@ -738,10 +738,10 @@ SETUP may contain a parser setup function."
 null eq{pop{pop}bind}if def\
 <</BeginPage{currentpagedevice/PageSize get dup 0 get 1 ne exch 1 get 1 ne or\
 {.preview-BP %s}{pop}ifelse}bind/PageSize[1 1]>>setpagedevice\
-/preview-do{[count 3 roll save]3 1 roll dup length 0 eq\
-{pop}{setpagedevice}{ifelse .runandhide}\
+/preview-do{/.preview-ST[count 4 roll save]def dup length 0 eq\
+{pop}{setpagedevice}{ifelse exec}\
 stopped{handleerror quit}if \
-aload pop restore}bind def "
+.preview-ST aload pop restore}bind def "
                  (preview-gs-color-string preview-colors)))
     (preview-gs-queue-empty)
     (preview-parse-messages (or setup #'preview-gs-dvips-process-setup))))
@@ -1090,7 +1090,7 @@ NONREL is not NIL."
 .locksafe} stopped pop "
                          (mapconcat 'preview-ps-quote-filename all-files ""))
                  preview-gs-init-string
-                 (format "[%s(r)file]aload exch %s .runandhide aload pop "
+                 (format " %s(r)file /.preview-ST 1 index def %s exec 
.preview-ST "
                          (preview-ps-quote-filename file)
                          (preview-gs-dsc-cvx 0 preview-gs-dsc))))))
 



reply via email to

[Prev in Thread] Current Thread [Next in Thread]