Petr Gajdos
e0f10b5248
* CVE-2013-4232.patch [bnc#834477] * CVE-2013-4231.patch [bnc#834477] * CVE-2013-4244.patch [bnc#834788] * CVE-2013-4243.patch [bnc#834779] OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=60
20 lines
579 B
Diff
20 lines
579 B
Diff
Index: gif2tiff.c
|
|
===================================================================
|
|
RCS file: /cvs/maptools/cvsroot/libtiff/tools/gif2tiff.c,v
|
|
retrieving revision 1.12
|
|
diff -u -r1.12 gif2tiff.c
|
|
--- tools/gif2tiff.c 15 Dec 2010 00:22:44 -0000 1.12
|
|
+++ tools/gif2tiff.c 14 Aug 2013 04:28:07 -0000
|
|
@@ -398,6 +398,10 @@
|
|
}
|
|
|
|
if (oldcode == -1) {
|
|
+ if (code >= clear) {
|
|
+ fprintf(stderr, "bad input: code=%d is larger than clear=%d\n",code, clear);
|
|
+ return 0;
|
|
+ }
|
|
*(*fill)++ = suffix[code];
|
|
firstchar = oldcode = code;
|
|
return 1;
|
|
|