This patch comes from: https://github.com/vadz/libtiff/commit/ce6841d9e41d621ba23cf18b190ee6a23b2cc833 Upstream-Status: Backport Signed-off-by: Baogen shang --- a/tools/gif2tiff.c 2013-12-17 16:46:02.160814995 +0800 +++ b/tools/gif2tiff.c 2013-12-17 16:52:25.140814949 +0800 @@ -406,6 +406,11 @@ return 0; } if (oldcode == -1) { + if (code >= clear) { + fprintf(stderr, "bad input: code=%d is larger than clear=%d\n",code, clear); + return 0; + } + *(*fill)++ = suffix[code]; firstchar = oldcode = code; return 1;