slackbuilds_ponce/graphics/ufraw/patches/CVE-2015-8366.patch
Nishant Limbachia e6decbe98a graphics/ufraw: Patched.
Signed-off-by: David Spencer <idlemoor@slackbuilds.org>
2017-08-12 06:57:57 +07:00

17 lines
498 B
Diff

Fix a buffer overflow bug. See
https://github.com/LibRaw/LibRaw/commit/89d065424f09b788f443734d44857289489ca9e2
--- a/dcraw.cc
+++ b/dcraw.cc
@@ -3013,7 +3013,10 @@
diff = diff ? -diff : 0x80;
if (ftell(ifp) + 12 >= (int) seg[1][1])
diff = 0;
- raw_image[pix] = pred[pix & 1] += diff;
+ if(pix>=raw_width*raw_height)
+ derror();
+ else
+ raw_image[pix] = pred[pix & 1] += diff;
if (!(pix & 1) && HOLE(pix / raw_width)) pix += 2;
}
maximum = 0xff;