diff options
author | Hitendra Prajapati <hprajapati@mvista.com> | 2022-08-23 10:10:15 +0530 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2022-09-03 13:10:37 +0100 |
commit | dea6f2c847296639359546198709bf333a881d29 (patch) | |
tree | 0a67cbec1acef2fa63e2acdbad8ab738d80183aa /meta/recipes-multimedia/libtiff/files/CVE-2022-34526.patch | |
parent | 87377eacc0a9b17be3ba69efe11f54bbd93fdc79 (diff) | |
download | poky-dea6f2c847296639359546198709bf333a881d29.tar.gz |
libtiff: CVE-2022-34526 A stack overflow was discovered
Source: https://gitlab.com/libtiff/libtiff
MR: 120545
Type: Security Fix
Disposition: Backport from https://gitlab.com/libtiff/libtiff/-/commit/275735d0354e39c0ac1dc3c0db2120d6f31d1990
ChangeID: 4c781586f7aba27420a7adc0adc597cc68495387
Description:
CVE-2022-34526 libtiff: A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit.
(From OE-Core rev: 462d4a55a460c60a7b8c36fe3899e66f13835761)
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-multimedia/libtiff/files/CVE-2022-34526.patch')
-rw-r--r-- | meta/recipes-multimedia/libtiff/files/CVE-2022-34526.patch | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/meta/recipes-multimedia/libtiff/files/CVE-2022-34526.patch b/meta/recipes-multimedia/libtiff/files/CVE-2022-34526.patch new file mode 100644 index 0000000000..cf440ce55f --- /dev/null +++ b/meta/recipes-multimedia/libtiff/files/CVE-2022-34526.patch | |||
@@ -0,0 +1,29 @@ | |||
1 | From 06386cc9dff5dc162006abe11fd4d1a6fad616cc Mon Sep 17 00:00:00 2001 | ||
2 | From: Hitendra Prajapati <hprajapati@mvista.com> | ||
3 | Date: Thu, 18 Aug 2022 09:40:50 +0530 | ||
4 | Subject: [PATCH] CVE-2022-34526 | ||
5 | |||
6 | Upstream-Status: Backport [https://gitlab.com/libtiff/libtiff/-/commit/275735d0354e39c0ac1dc3c0db2120d6f31d1990] | ||
7 | CVE: CVE-2022-34526 | ||
8 | Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> | ||
9 | --- | ||
10 | libtiff/tif_dirinfo.c | 3 +++ | ||
11 | 1 file changed, 3 insertions(+) | ||
12 | |||
13 | diff --git a/libtiff/tif_dirinfo.c b/libtiff/tif_dirinfo.c | ||
14 | index 52d53d4..4a1ca00 100644 | ||
15 | --- a/libtiff/tif_dirinfo.c | ||
16 | +++ b/libtiff/tif_dirinfo.c | ||
17 | @@ -983,6 +983,9 @@ _TIFFCheckFieldIsValidForCodec(TIFF *tif, ttag_t tag) | ||
18 | default: | ||
19 | return 1; | ||
20 | } | ||
21 | + if( !TIFFIsCODECConfigured(tif->tif_dir.td_compression) ) { | ||
22 | + return 0; | ||
23 | + } | ||
24 | /* Check if codec specific tags are allowed for the current | ||
25 | * compression scheme (codec) */ | ||
26 | switch (tif->tif_dir.td_compression) { | ||
27 | -- | ||
28 | 2.25.1 | ||
29 | |||