The patch has been taken from community and fixes Integer overflow.

The details can be found in the following location

--- ghostscript-9.00/base/gsmalloc.c Thu Apr 29 11:32:44 2010

+++ ghostscript-9.00/base/gsmalloc.c Tue Aug 11 03:28:23 2015

@@ -177,7 +177,7 @@

} else {

uint added = size + sizeof(gs_malloc_block_t);

- if (mmem->limit - added < mmem->used)

+ if (added <= size || mmem->limit - added < mmem->used)

set_msg("exceeded limit");

else if ((ptr = (byte *) malloc(added)) == 0)

set_msg("failed");