0001-CVE-2024-47076.patch

From 10fb02eaaee52e0be9b16917b38aa8ec5bddd87f Mon Sep 17 00:00:00 2001
From: Till Kamppeter <till.kamppeter@gmail.com>
Date: Sun, 29 Sep 2024 17:34:33 +0200
Subject: [PATCH] get_printer_attributes5(): Validate response attributes
 before return

The destination can be corrupted or forged, so validate the response
to strenghten security measures.

Fixes CVE-2024-47076
---
 cupsfilters/ipp.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/cupsfilters/ipp.c b/cupsfilters/ipp.c
index 5c53704a3..6b8bafe93 100644
--- a/cupsfilters/ipp.c
+++ b/cupsfilters/ipp.c
@@ -435,6 +435,14 @@ get_printer_attributes5(http_t *http_printer,
 	    ippDelete(response2);
 	  }
 	}
+
+	// Check if the response is valid
+	if (!ippValidateAttributes(response))
+	{
+	  ippDelete(response);
+	  response = NULL;
+	}
+
 	if (have_http == 0) httpClose(http_printer);
 	if (uri) free(uri);
 	return response;