Petr Gajdos
daa5f36cc1
CVE-2014-8129, CVE-2014-8130, CVE-2015-1547
bnc#914890, bnc#916925, bnc#916927
+ erouault.2856.patch
+ erouault.2857.patch
+ erouault.2858.patch
+ erouault.2859.patch
+ erouault.2860.patch
+ erouault.2861.patch
+ erouault.2862.patch
+ erouault.2863.patch
+ erouault.2876.patch
+ bfriesen.2805.patch
+ tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
+ tiff-handle-TIFFTAG_PREDICTOR.patch
+ tiff-dither-malloc-check.patch
OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=65
48 lines
1.1 KiB
Diff
48 lines
1.1 KiB
Diff
---------------------
|
|
PatchSet 2859
|
|
Date: 2014/12/21 20:07:48
|
|
Author: erouault
|
|
Branch: HEAD
|
|
Tag: (none)
|
|
Log:
|
|
* libtiff/tif_next.c: check that BitsPerSample = 2. Fixes
|
|
http://bugzilla.maptools.org/show_bug.cgi?id=2487 (CVE-2014-8129)
|
|
|
|
Members:
|
|
ChangeLog:1.963->1.964
|
|
libtiff/tif_next.c:1.14->1.15
|
|
|
|
|
|
Index: libtiff/libtiff/tif_next.c
|
|
diff -u libtiff/libtiff/tif_next.c:1.14 libtiff/libtiff/tif_next.c:1.15
|
|
--- libtiff/libtiff/tif_next.c:1.14 Sun Dec 21 10:15:32 2014
|
|
+++ libtiff/libtiff/tif_next.c Sun Dec 21 13:07:48 2014
|
|
@@ -141,10 +141,27 @@
|
|
return (0);
|
|
}
|
|
|
|
+static int
|
|
+NeXTPreDecode(TIFF* tif, uint16 s)
|
|
+{
|
|
+ static const char module[] = "NeXTPreDecode";
|
|
+ TIFFDirectory *td = &tif->tif_dir;
|
|
+ (void)s;
|
|
+
|
|
+ if( td->td_bitspersample != 2 )
|
|
+ {
|
|
+ TIFFErrorExt(tif->tif_clientdata, module, "Unsupported BitsPerSample = %d",
|
|
+ td->td_bitspersample);
|
|
+ return (0);
|
|
+ }
|
|
+ return (1);
|
|
+}
|
|
+
|
|
int
|
|
TIFFInitNeXT(TIFF* tif, int scheme)
|
|
{
|
|
(void) scheme;
|
|
+ tif->tif_predecode = NeXTPreDecode;
|
|
tif->tif_decoderow = NeXTDecode;
|
|
tif->tif_decodestrip = NeXTDecode;
|
|
tif->tif_decodetile = NeXTDecode;
|