diff options
author | Randy MacLeod <Randy.MacLeod@windriver.com> | 2015-06-26 16:27:51 -0400 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-06-27 22:42:56 +0100 |
commit | e3b35f56a80d3adbe997950702dd5eba243d1bbc (patch) | |
tree | cf60d53a7c14319f5eebc2a23464d2cafaf2b862 /meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-4231.patch | |
parent | b3fc3748a0789463942e06cf5761af0c142eba72 (diff) | |
download | poky-e3b35f56a80d3adbe997950702dd5eba243d1bbc.tar.gz |
tiff: Update to 4.0.4
Update tiff to latest version. None of the local CVE patches
are needed based on reviewing the ChangeLog so remove them.
(From OE-Core rev: 5c5d7c2ab0d32faca43ba360d5d42ecd2822c730)
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-4231.patch')
-rw-r--r-- | meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-4231.patch | 44 |
1 files changed, 0 insertions, 44 deletions
diff --git a/meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-4231.patch b/meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-4231.patch deleted file mode 100644 index d8d4e961db..0000000000 --- a/meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-4231.patch +++ /dev/null | |||
@@ -1,44 +0,0 @@ | |||
1 | Upstream-Status: Backport | ||
2 | |||
3 | Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers | ||
4 | to cause a denial of service (out-of-bounds write) via a crafted (1) | ||
5 | extension block in a GIF image or (2) GIF raster image to | ||
6 | tools/gif2tiff.c or (3) a long filename for a TIFF image to | ||
7 | tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which | ||
8 | states that the input cannot exceed the allocated buffer size. | ||
9 | |||
10 | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4231Multiple | ||
11 | buffer overflows in libtiff before 4.0.3 allow remote attackers to cause | ||
12 | a denial of service (out-of-bounds write) via a crafted (1) extension | ||
13 | block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) | ||
14 | a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 | ||
15 | and 3 are disputed by Red Hat, which states that the input cannot exceed | ||
16 | the allocated buffer size. | ||
17 | |||
18 | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4231 | ||
19 | |||
20 | Signed-off-by: Yue Tao <Yue.Tao@windriver.com> | ||
21 | |||
22 | Index: tools/gif2tiff.c | ||
23 | =================================================================== | ||
24 | RCS file: /cvs/maptools/cvsroot/libtiff/tools/gif2tiff.c,v | ||
25 | retrieving revision 1.12 | ||
26 | retrieving revision 1.13 | ||
27 | diff -u -r1.12 -r1.13 | ||
28 | --- a/tools/gif2tiff.c 15 Dec 2010 00:22:44 -0000 1.12 | ||
29 | +++ b/tools/gif2tiff.c 14 Aug 2013 05:18:53 -0000 1.13 | ||
30 | @@ -1,4 +1,4 @@ | ||
31 | -/* $Id: gif2tiff.c,v 1.12 2010-12-15 00:22:44 faxguy Exp $ */ | ||
32 | +/* $Id: gif2tiff.c,v 1.13 2013-08-14 05:18:53 fwarmerdam Exp $ */ | ||
33 | |||
34 | /* | ||
35 | * Copyright (c) 1990-1997 Sam Leffler | ||
36 | @@ -333,6 +333,8 @@ | ||
37 | int status = 1; | ||
38 | |||
39 | datasize = getc(infile); | ||
40 | + if (datasize > 12) | ||
41 | + return 0; | ||
42 | clear = 1 << datasize; | ||
43 | eoi = clear + 1; | ||
44 | avail = clear + 2; | ||