diff options
Diffstat (limited to 'meta/recipes-multimedia/libtiff/files/CVE-2017-7594-p1.patch')
-rw-r--r-- | meta/recipes-multimedia/libtiff/files/CVE-2017-7594-p1.patch | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/meta/recipes-multimedia/libtiff/files/CVE-2017-7594-p1.patch b/meta/recipes-multimedia/libtiff/files/CVE-2017-7594-p1.patch new file mode 100644 index 0000000000..5c7e4603cc --- /dev/null +++ b/meta/recipes-multimedia/libtiff/files/CVE-2017-7594-p1.patch | |||
@@ -0,0 +1,43 @@ | |||
1 | rom 8283e4d1b7e53340684d12932880cbcbaf23a8c1 Mon Sep 17 00:00:00 2001 | ||
2 | From: erouault <erouault> | ||
3 | Date: Thu, 12 Jan 2017 17:43:25 +0000 | ||
4 | |||
5 | * libtiff/tif_ojpeg.c: fix leak in OJPEGReadHeaderInfoSecTablesAcTable | ||
6 | when read fails. | ||
7 | Patch by Nicolas Pena. | ||
8 | Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659 | ||
9 | |||
10 | Upstream-Status: Backport | ||
11 | |||
12 | CVE: CVE-2017-7594 #patch1 | ||
13 | Signed-off-by: Rajkumar Veer <rveer@mvista.com> | ||
14 | Index: tiff-4.0.7/ChangeLog | ||
15 | =================================================================== | ||
16 | --- tiff-4.0.7.orig/ChangeLog 2017-04-24 16:13:15.000000000 +0530 | ||
17 | +++ tiff-4.0.7/ChangeLog 2017-04-24 16:50:26.465897646 +0530 | ||
18 | @@ -1,3 +1,10 @@ | ||
19 | +2017-01-12 Even Rouault <even.rouault at spatialys.com> | ||
20 | + | ||
21 | + * libtiff/tif_ojpeg.c: fix leak in OJPEGReadHeaderInfoSecTablesAcTable | ||
22 | + when read fails. | ||
23 | + Patch by Nicolás Peña. | ||
24 | + Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659 | ||
25 | + | ||
26 | 2017-01-11 Even Rouault <even.rouault at spatialys.com> | ||
27 | |||
28 | * libtiff/tif_getimage.c: add explicit uint32 cast in putagreytile to | ||
29 | Index: tiff-4.0.7/libtiff/tif_ojpeg.c | ||
30 | =================================================================== | ||
31 | --- tiff-4.0.7.orig/libtiff/tif_ojpeg.c 2017-04-24 16:02:29.817973051 +0530 | ||
32 | +++ tiff-4.0.7/libtiff/tif_ojpeg.c 2017-04-24 16:52:27.349894477 +0530 | ||
33 | @@ -1918,7 +1918,10 @@ | ||
34 | rb[sizeof(uint32)+5+n]=o[n]; | ||
35 | p=(uint32)TIFFReadFile(tif,&(rb[sizeof(uint32)+21]),q); | ||
36 | if (p!=q) | ||
37 | + { | ||
38 | + _TIFFfree(rb); | ||
39 | return(0); | ||
40 | + } | ||
41 | sp->actable[m]=rb; | ||
42 | sp->sos_tda[m]=(sp->sos_tda[m]|m); | ||
43 | } | ||