tiff/tiff-3.8.2-tiffsplit-CVE-2006-2656.patch

20 lines
497 B
Diff

--- tools/tiffsplit.c
+++ tools/tiffsplit.c
@@ -61,14 +61,13 @@
return (-3);
}
if (argc > 2)
- strcpy(fname, argv[2]);
+ snprintf(fname, sizeof(fname), "%s", argv[2]);
in = TIFFOpen(argv[1], "r");
if (in != NULL) {
do {
char path[1024+1];
newfilename();
- strcpy(path, fname);
- strcat(path, ".tif");
+ snprintf(path, sizeof(path), "%s.tif", fname);
out = TIFFOpen(path, TIFFIsBigEndian(in)?"wb":"wl");
if (out == NULL)
return (-2);