Subject: bug#72245: [PATCH] Fix integer overflow when reading XPM

From: Stefan Kangas <[email-masked]>
Date: Mon, 22 Jul 2024 20:04:23 -0700

Po Lu <[email-masked]> writes:

> Stefan Kangas <[email-masked]> writes:
>
>> Severity: minor
>>
>> Since XPM files are untrusted input, I think we'd better handle
>> integer
>> overflow when parsing it, in case the file is malformed.
>>
>> Proposed patch attached.
>
> What are the security implications of accepting whatever scanf produces
> in the event of an overflow?

There is a good summary here:

    https://cwe.mitre.org/data/definitions/190.html