Compare commits
No commits in common. 'epel9' and 'i9' have entirely different histories.
@ -1 +1 @@
|
|||||||
/*.tar.*
|
SOURCES/optipng-0.7.7.tar.gz
|
||||||
|
@ -0,0 +1 @@
|
|||||||
|
68aa89fbde642b104aeefa9efbc4dfbb936fa630 SOURCES/optipng-0.7.7.tar.gz
|
@ -1,25 +0,0 @@
|
|||||||
From 77ac8e9fd9b2c1aeec3951e2bb50f7cc2c1e92d2 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Sebastian Pipping <sebastian@pipping.org>
|
|
||||||
Date: Sun, 19 Nov 2017 16:04:26 +0100
|
|
||||||
Subject: [PATCH] Prevent integer overflow (bug #65, CVE-2017-1000229)
|
|
||||||
|
|
||||||
---
|
|
||||||
src/minitiff/tiffread.c | 2 ++
|
|
||||||
1 file changed, 2 insertions(+)
|
|
||||||
|
|
||||||
diff --git a/src/minitiff/tiffread.c b/src/minitiff/tiffread.c
|
|
||||||
index b4910ec..5f9b376 100644
|
|
||||||
--- a/src/minitiff/tiffread.c
|
|
||||||
+++ b/src/minitiff/tiffread.c
|
|
||||||
@@ -350,6 +350,8 @@ minitiff_read_info(struct minitiff_info *tiff_ptr, FILE *fp)
|
|
||||||
count = tiff_ptr->strip_offsets_count;
|
|
||||||
if (count == 0 || count > tiff_ptr->height)
|
|
||||||
goto err_invalid;
|
|
||||||
+ if (count > (size_t)-1 / sizeof(long))
|
|
||||||
+ goto err_memory;
|
|
||||||
tiff_ptr->strip_offsets = (long *)malloc(count * sizeof(long));
|
|
||||||
if (tiff_ptr->strip_offsets == NULL)
|
|
||||||
goto err_memory;
|
|
||||||
--
|
|
||||||
2.14.2
|
|
||||||
|
|
@ -1,45 +0,0 @@
|
|||||||
From e05fb81a20541833a2d62ce08552b18c0920b9a1 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Cosmin Truta <ctruta@gmail.com>
|
|
||||||
Date: Sat, 25 Nov 2017 23:17:46 -0500
|
|
||||||
Subject: [PATCH] gifread: Detect indirect circular dependencies in LZW tables
|
|
||||||
|
|
||||||
---
|
|
||||||
src/gifread/gifread.c | 4 +++-
|
|
||||||
src/gifread/gifread.h | 2 +-
|
|
||||||
2 files changed, 4 insertions(+), 2 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/src/gifread/gifread.c b/src/gifread/gifread.c
|
|
||||||
index 0123456789abcdef..0123456789abcdef 100644
|
|
||||||
--- a/src/gifread/gifread.c
|
|
||||||
+++ b/src/gifread/gifread.c
|
|
||||||
@@ -5,7 +5,7 @@
|
|
||||||
* @author Cosmin Truta
|
|
||||||
*
|
|
||||||
* @section Copyright
|
|
||||||
- * Copyright (C) 2003-2015 Cosmin Truta.
|
|
||||||
+ * Copyright (C) 2003-2017 Cosmin Truta.
|
|
||||||
* This software was derived from "giftopnm.c" by David Koblas,
|
|
||||||
* and is distributed under the same copyright and warranty terms.
|
|
||||||
*
|
|
||||||
@@ -499,6 +499,8 @@ static int LZWReadByte(int init_flag, int input_code_size, FILE *stream)
|
|
||||||
*sp++ = table[1][code];
|
|
||||||
if (code == table[0][code])
|
|
||||||
GIFError("GIF/LZW error: circular table entry");
|
|
||||||
+ if ((size_t)(sp - stack) >= sizeof(stack) / sizeof(stack[0]))
|
|
||||||
+ GIFError("GIF/LZW error: circular table");
|
|
||||||
code = table[0][code];
|
|
||||||
}
|
|
||||||
|
|
||||||
diff --git a/src/gifread/gifread.h b/src/gifread/gifread.h
|
|
||||||
index 0123456789abcdef..0123456789abcdef 100644
|
|
||||||
--- a/src/gifread/gifread.h
|
|
||||||
+++ b/src/gifread/gifread.h
|
|
||||||
@@ -5,7 +5,7 @@
|
|
||||||
* @author Cosmin Truta
|
|
||||||
*
|
|
||||||
* @section Copyright
|
|
||||||
- * Copyright (C) 2003-2015 Cosmin Truta.
|
|
||||||
+ * Copyright (C) 2003-2017 Cosmin Truta.
|
|
||||||
* This software was derived from "giftopnm.c" by David Koblas,
|
|
||||||
* and is distributed under the same copyright and warranty terms.
|
|
||||||
*
|
|
Loading…
Reference in new issue