mirror of
git://slackware.nl/current.git
synced 2024-12-28 09:59:53 +01:00
24 lines
583 B
Diff
24 lines
583 B
Diff
|
From 5d19703933eaa59f97be9c88237fe00593f180ae Mon Sep 17 00:00:00 2001
|
||
|
|
From: mancha <mancha1@hush.com>
|
||
|
|
Date: Mon, 19 Aug 2013
|
||
|
|
Subject: CVE-2013-4231
|
||
|
|
|
||
|
|
* tools/gif2tiff.c: Be more careful about corrupt or
|
||
|
|
hostile input files (#2450, CVE-2013-4231)
|
||
|
|
|
||
|
|
---
|
||
|
|
gif2tiff.c | 2 ++
|
||
|
|
1 file changed, 2 insertions(+)
|
||
|
|
|
||
|
|
--- a/tools/gif2tiff.c 2013-08-20
|
||
|
|
+++ b/tools/gif2tiff.c 2013-08-20
|
||
|
|
@@ -329,6 +329,8 @@ readraster(void)
|
||
|
|
int status = 1;
|
||
|
|
|
||
|
|
datasize = getc(infile);
|
||
|
|
+ if (datasize > 12)
|
||
|
|
+ return 0;
|
||
|
|
clear = 1 << datasize;
|
||
|
|
eoi = clear + 1;
|
||
|
|
avail = clear + 2;
|