dvipdfmx file name issue

Christian Schenk cs at miktex.org
Tue Feb 11 11:50:08 CET 2020


The pre-release dvipdfmx (20200116) seems to have a subtle issue. See:
https://github.com/MiKTeX/miktex/issues/472

This code block in dvipdfmx.c (line 145) should be reviewed:

  dvi_base = xbasename(dvi_filename);
  len      = strlen(dvi_base) - strlen(".dvi");
  suffix   = dvi_base + len;

(We cannot assert that the file name ends in .dvi.)

If you agree that this is a bug, it should be fixed asap (security).


More information about the tex-live mailing list.