16 lines
643 B
Diff
16 lines
643 B
Diff
|
Index: libtiff/tif_fax3.h
|
||
|
===================================================================
|
||
|
--- libtiff/tif_fax3.h.orig
|
||
|
+++ libtiff/tif_fax3.h
|
||
|
@@ -478,6 +478,10 @@ done1d: \
|
||
|
break; \
|
||
|
case S_VL: \
|
||
|
CHECK_b1; \
|
||
|
+ if (b1 <= (int) (a0 + TabEnt->Param)) { \
|
||
|
+ unexpected("VL", a0); \
|
||
|
+ goto eol2d; \
|
||
|
+ } \
|
||
|
SETVALUE(b1 - a0 - TabEnt->Param); \
|
||
|
b1 -= *--pb; \
|
||
|
break; \
|