libraw/libraw-CVE-2020-22628.patch
Petr Gajdos f58c61f7c1 - Update to 0.21.3:
* new compile-time define LIBRAW_CALLOC_RAWSTORE
    If defined: calloc() will be used for all big buffer allocations
    to prevent uninitialized heap data leak
  * Small allocations: calloc() instead of malloc() to prevent
    uninitialized heap data leak
  * Support for 4-component JPEG-compressed DNG files
  * CR3-Qstep table: avoid wrong 64-bit code generation
  * Fixed several bugs related to specially-crafted files processing
    (thanks to OSS-Fuzz project)

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=163
2025-01-31 08:13:14 +00:00

14 lines
553 B
Diff

Index: LibRaw-0.21.1/src/metadata/identify.cpp
===================================================================
--- LibRaw-0.21.1.orig/src/metadata/identify.cpp
+++ LibRaw-0.21.1/src/metadata/identify.cpp
@@ -1243,7 +1243,7 @@ dng_skip:
if (raw_width < 22 || raw_width > 64000 || raw_height < 22 ||
pixel_aspect < 0.1 || pixel_aspect > 10. ||
- raw_height > 64000)
+ raw_height > 64000 || pixel_aspect < 0.1 || pixel_aspect > 10)
is_raw = 0;
if(raw_width <= left_margin || raw_height <= top_margin)
is_raw = 0;