diff options
| author | Natanael Copa <ncopa@alpinelinux.org> | 2015-01-29 12:51:17 +0000 |
|---|---|---|
| committer | Natanael Copa <ncopa@alpinelinux.org> | 2015-01-29 12:51:17 +0000 |
| commit | a3c611fae92fca14cdae49707d4c798def7df413 (patch) | |
| tree | cf5c2177945bfe687f7a5e54726c3bf8e100460f /main/jasper/CVE-2014-9029.patch | |
| parent | 637ed149e5b0f0c9b01d9dfcd233c981233ee4dd (diff) | |
| download | aports-a3c611fae92fca14cdae49707d4c798def7df413.tar.bz2 aports-a3c611fae92fca14cdae49707d4c798def7df413.tar.xz | |
main/jasper: security fix for CVE-2014-9029
ref #3779
Diffstat (limited to 'main/jasper/CVE-2014-9029.patch')
| -rw-r--r-- | main/jasper/CVE-2014-9029.patch | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/main/jasper/CVE-2014-9029.patch b/main/jasper/CVE-2014-9029.patch new file mode 100644 index 0000000000..98a2035999 --- /dev/null +++ b/main/jasper/CVE-2014-9029.patch @@ -0,0 +1,29 @@ +--- jasper-1.900.1.orig/src/libjasper/jpc/jpc_dec.c 2014-11-27 12:45:44.000000000 +0100 ++++ jasper-1.900.1/src/libjasper/jpc/jpc_dec.c 2014-11-27 12:44:58.000000000 +0100 +@@ -1281,7 +1281,7 @@ static int jpc_dec_process_coc(jpc_dec_t + jpc_coc_t *coc = &ms->parms.coc; + jpc_dec_tile_t *tile; + +- if (JAS_CAST(int, coc->compno) > dec->numcomps) { ++ if (JAS_CAST(int, coc->compno) >= dec->numcomps) { + jas_eprintf("invalid component number in COC marker segment\n"); + return -1; + } +@@ -1307,7 +1307,7 @@ static int jpc_dec_process_rgn(jpc_dec_t + jpc_rgn_t *rgn = &ms->parms.rgn; + jpc_dec_tile_t *tile; + +- if (JAS_CAST(int, rgn->compno) > dec->numcomps) { ++ if (JAS_CAST(int, rgn->compno) >= dec->numcomps) { + jas_eprintf("invalid component number in RGN marker segment\n"); + return -1; + } +@@ -1356,7 +1356,7 @@ static int jpc_dec_process_qcc(jpc_dec_t + jpc_qcc_t *qcc = &ms->parms.qcc; + jpc_dec_tile_t *tile; + +- if (JAS_CAST(int, qcc->compno) > dec->numcomps) { ++ if (JAS_CAST(int, qcc->compno) >= dec->numcomps) { + jas_eprintf("invalid component number in QCC marker segment\n"); + return -1; + } |