There is an assertion in function _cairo_arc_in_direction().
|
|
CVE: CVE-2019-6462
|
Upstream-Status: Pending
|
Signed-off-by: Ross Burton <ross.burton@intel.com>
|
|
diff --git a/src/cairo-arc.c b/src/cairo-arc.c
|
index 390397bae..1bde774a4 100644
|
--- a/src/cairo-arc.c
|
+++ b/src/cairo-arc.c
|
@@ -186,7 +186,8 @@ _cairo_arc_in_direction (cairo_t *cr,
|
if (cairo_status (cr))
|
return;
|
|
- assert (angle_max >= angle_min);
|
+ if (angle_max < angle_min)
|
+ return;
|
|
if (angle_max - angle_min > 2 * M_PI * MAX_FULL_CIRCLES) {
|
angle_max = fmod (angle_max - angle_min, 2 * M_PI);
|