diff options
| author | Kiyoshi Aman <kiyoshi.aman+adelie@gmail.com> | 2019-11-19 18:47:57 -0500 |
|---|---|---|
| committer | Kiyoshi Aman <kiyoshi.aman+adelie@gmail.com> | 2019-11-19 18:47:57 -0500 |
| commit | d1d2a2e0891f2b11aa1f5f146ba76894c918a9ef (patch) | |
| tree | 5fbd6bb54920b2ff5463dd89528824e1215af49f /user/tiff/CVE-2019-7663.patch | |
| parent | 02a57817096280506b546df6d48c681a30269860 (diff) | |
| download | packages-d1d2a2e0891f2b11aa1f5f146ba76894c918a9ef.tar.gz packages-d1d2a2e0891f2b11aa1f5f146ba76894c918a9ef.tar.bz2 packages-d1d2a2e0891f2b11aa1f5f146ba76894c918a9ef.tar.xz packages-d1d2a2e0891f2b11aa1f5f146ba76894c918a9ef.zip | |
user/tiff: upgrade to 4.1.0
Diffstat (limited to 'user/tiff/CVE-2019-7663.patch')
| -rw-r--r-- | user/tiff/CVE-2019-7663.patch | 37 |
1 files changed, 0 insertions, 37 deletions
diff --git a/user/tiff/CVE-2019-7663.patch b/user/tiff/CVE-2019-7663.patch deleted file mode 100644 index 8049566c6..000000000 --- a/user/tiff/CVE-2019-7663.patch +++ /dev/null @@ -1,37 +0,0 @@ -From 802d3cbf3043be5dce5317e140ccb1c17a6a2d39 Mon Sep 17 00:00:00 2001 -From: Thomas Bernard <miniupnp@free.fr> -Date: Tue, 29 Jan 2019 11:21:47 +0100 -Subject: [PATCH] TIFFWriteDirectoryTagTransferfunction() : fix NULL - dereferencing - -http://bugzilla.maptools.org/show_bug.cgi?id=2833 - -we must check the pointer is not NULL before memcmp() the memory ---- - libtiff/tif_dirwrite.c | 6 ++++-- - 1 file changed, 4 insertions(+), 2 deletions(-) - -diff --git a/libtiff/tif_dirwrite.c b/libtiff/tif_dirwrite.c -index c15a28db..ef30c869 100644 ---- a/libtiff/tif_dirwrite.c -+++ b/libtiff/tif_dirwrite.c -@@ -1893,12 +1893,14 @@ TIFFWriteDirectoryTagTransferfunction(TIFF* tif, uint32* ndir, TIFFDirEntry* dir - n=3; - if (n==3) - { -- if (!_TIFFmemcmp(tif->tif_dir.td_transferfunction[0],tif->tif_dir.td_transferfunction[2],m*sizeof(uint16))) -+ if (tif->tif_dir.td_transferfunction[2] == NULL || -+ !_TIFFmemcmp(tif->tif_dir.td_transferfunction[0],tif->tif_dir.td_transferfunction[2],m*sizeof(uint16))) - n=2; - } - if (n==2) - { -- if (!_TIFFmemcmp(tif->tif_dir.td_transferfunction[0],tif->tif_dir.td_transferfunction[1],m*sizeof(uint16))) -+ if (tif->tif_dir.td_transferfunction[1] == NULL || -+ !_TIFFmemcmp(tif->tif_dir.td_transferfunction[0],tif->tif_dir.td_transferfunction[1],m*sizeof(uint16))) - n=1; - } - if (n==0) --- -2.21.0 - |