From 361f274ca901c3c476697a6404662d95f4dd43cb Mon Sep 17 00:00:00 2001 From: Matthew Fernandez Date: Fri, 12 Jan 2024 17:06:17 +1100 Subject: [PATCH] gvc gvconfig_plugin_install_from_config: more tightly scope 'gv_api' Upstream-Status: Backport [https://gitlab.com/graphviz/graphviz/-/commit/361f274ca901c3c476697a6404662d95f4dd43cb] CVE: CVE-2023-46045 Signed-off-by: Meenali Gupta --- lib/gvc/gvconfig.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/lib/gvc/gvconfig.c b/lib/gvc/gvconfig.c index 2d86321..f9d1dcc 100644 --- a/lib/gvc/gvconfig.c +++ b/lib/gvc/gvconfig.c @@ -173,7 +173,6 @@ static int gvconfig_plugin_install_from_config(GVC_t * gvc, char *s) { char *package_path, *name, *api; const char *type; - api_t gv_api; int quality, rc; int nest = 0; gvplugin_package_t *package; @@ -188,7 +187,7 @@ static int gvconfig_plugin_install_from_config(GVC_t * gvc, char *s) package = gvplugin_package_record(gvc, package_path, name); do { api = token(&nest, &s); - gv_api = gvplugin_api(api); + const api_t gv_api = gvplugin_api(api); do { if (nest == 2) { type = token(&nest, &s); -- 2.40.0