Marcus Meissner
383c2af687
- added some gentoo/debian patches: * ufraw-0.22-jpeg9.patch * ufraw-0.22-exiv2-0.27.patch * 01_no-gimp-remote.patch * 02_CVE-2015-8366.patch * 04_fix-abs-gcc-7.patch * 05_CVE-2018-19655.patch * 06_lensfun_destroy_cleanup.patch OBS-URL: https://build.opensuse.org/request/show/673262 OBS-URL: https://build.opensuse.org/package/show/graphics/ufraw?expand=0&rev=47
18 lines
498 B
Diff
18 lines
498 B
Diff
Fix a buffer overflow bug. See
|
|
https://github.com/LibRaw/LibRaw/commit/89d065424f09b788f443734d44857289489ca9e2
|
|
|
|
--- a/dcraw.cc
|
|
+++ b/dcraw.cc
|
|
@@ -3013,7 +3013,10 @@
|
|
diff = diff ? -diff : 0x80;
|
|
if (ftell(ifp) + 12 >= (int) seg[1][1])
|
|
diff = 0;
|
|
- raw_image[pix] = pred[pix & 1] += diff;
|
|
+ if(pix>=raw_width*raw_height)
|
|
+ derror();
|
|
+ else
|
|
+ raw_image[pix] = pred[pix & 1] += diff;
|
|
if (!(pix & 1) && HOLE(pix / raw_width)) pix += 2;
|
|
}
|
|
maximum = 0xff;
|