Compare commits
No commits in common. 'i9' and 'epel9' have entirely different histories.
@ -1 +1 @@
|
|||||||
SOURCES/optipng-0.7.7.tar.gz
|
/*.tar.*
|
||||||
|
@ -1 +0,0 @@
|
|||||||
68aa89fbde642b104aeefa9efbc4dfbb936fa630 SOURCES/optipng-0.7.7.tar.gz
|
|
@ -0,0 +1,25 @@
|
|||||||
|
From 77ac8e9fd9b2c1aeec3951e2bb50f7cc2c1e92d2 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Sebastian Pipping <sebastian@pipping.org>
|
||||||
|
Date: Sun, 19 Nov 2017 16:04:26 +0100
|
||||||
|
Subject: [PATCH] Prevent integer overflow (bug #65, CVE-2017-1000229)
|
||||||
|
|
||||||
|
---
|
||||||
|
src/minitiff/tiffread.c | 2 ++
|
||||||
|
1 file changed, 2 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/src/minitiff/tiffread.c b/src/minitiff/tiffread.c
|
||||||
|
index b4910ec..5f9b376 100644
|
||||||
|
--- a/src/minitiff/tiffread.c
|
||||||
|
+++ b/src/minitiff/tiffread.c
|
||||||
|
@@ -350,6 +350,8 @@ minitiff_read_info(struct minitiff_info *tiff_ptr, FILE *fp)
|
||||||
|
count = tiff_ptr->strip_offsets_count;
|
||||||
|
if (count == 0 || count > tiff_ptr->height)
|
||||||
|
goto err_invalid;
|
||||||
|
+ if (count > (size_t)-1 / sizeof(long))
|
||||||
|
+ goto err_memory;
|
||||||
|
tiff_ptr->strip_offsets = (long *)malloc(count * sizeof(long));
|
||||||
|
if (tiff_ptr->strip_offsets == NULL)
|
||||||
|
goto err_memory;
|
||||||
|
--
|
||||||
|
2.14.2
|
||||||
|
|
@ -0,0 +1,45 @@
|
|||||||
|
From e05fb81a20541833a2d62ce08552b18c0920b9a1 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Cosmin Truta <ctruta@gmail.com>
|
||||||
|
Date: Sat, 25 Nov 2017 23:17:46 -0500
|
||||||
|
Subject: [PATCH] gifread: Detect indirect circular dependencies in LZW tables
|
||||||
|
|
||||||
|
---
|
||||||
|
src/gifread/gifread.c | 4 +++-
|
||||||
|
src/gifread/gifread.h | 2 +-
|
||||||
|
2 files changed, 4 insertions(+), 2 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/src/gifread/gifread.c b/src/gifread/gifread.c
|
||||||
|
index 0123456789abcdef..0123456789abcdef 100644
|
||||||
|
--- a/src/gifread/gifread.c
|
||||||
|
+++ b/src/gifread/gifread.c
|
||||||
|
@@ -5,7 +5,7 @@
|
||||||
|
* @author Cosmin Truta
|
||||||
|
*
|
||||||
|
* @section Copyright
|
||||||
|
- * Copyright (C) 2003-2015 Cosmin Truta.
|
||||||
|
+ * Copyright (C) 2003-2017 Cosmin Truta.
|
||||||
|
* This software was derived from "giftopnm.c" by David Koblas,
|
||||||
|
* and is distributed under the same copyright and warranty terms.
|
||||||
|
*
|
||||||
|
@@ -499,6 +499,8 @@ static int LZWReadByte(int init_flag, int input_code_size, FILE *stream)
|
||||||
|
*sp++ = table[1][code];
|
||||||
|
if (code == table[0][code])
|
||||||
|
GIFError("GIF/LZW error: circular table entry");
|
||||||
|
+ if ((size_t)(sp - stack) >= sizeof(stack) / sizeof(stack[0]))
|
||||||
|
+ GIFError("GIF/LZW error: circular table");
|
||||||
|
code = table[0][code];
|
||||||
|
}
|
||||||
|
|
||||||
|
diff --git a/src/gifread/gifread.h b/src/gifread/gifread.h
|
||||||
|
index 0123456789abcdef..0123456789abcdef 100644
|
||||||
|
--- a/src/gifread/gifread.h
|
||||||
|
+++ b/src/gifread/gifread.h
|
||||||
|
@@ -5,7 +5,7 @@
|
||||||
|
* @author Cosmin Truta
|
||||||
|
*
|
||||||
|
* @section Copyright
|
||||||
|
- * Copyright (C) 2003-2015 Cosmin Truta.
|
||||||
|
+ * Copyright (C) 2003-2017 Cosmin Truta.
|
||||||
|
* This software was derived from "giftopnm.c" by David Koblas,
|
||||||
|
* and is distributed under the same copyright and warranty terms.
|
||||||
|
*
|
Loading…
Reference in new issue