diff options
| author | Leonardo Arena <rnalrd@alpinelinux.org> | 2017-04-25 14:58:37 +0000 |
|---|---|---|
| committer | Leonardo Arena <rnalrd@alpinelinux.org> | 2017-04-25 14:58:37 +0000 |
| commit | dd8f891e03d6c9f13592cb40f786b4528af87e68 (patch) | |
| tree | 6355c1edfc141126ac38952885905887a040a4c6 /main/tiff/CVE-2017-7592.patch | |
| parent | 88c575c673f1e935c7358035436cdfdb5b2bf545 (diff) | |
| download | aports-dd8f891e03d6c9f13592cb40f786b4528af87e68.tar.bz2 aports-dd8f891e03d6c9f13592cb40f786b4528af87e68.tar.xz | |
main/tiff: security fixes #7118
CVE-2017-7592, CVE-2017-7593, CVE-2017-7594, CVE-2017-7595, CVE-2017-7596,
CVE-2017-7598, CVE-2017-7601, CVE-2017-7602
CVE-2017-7597, CVE-2017-7599, CVE-75600 are already included in upstream release
Diffstat (limited to 'main/tiff/CVE-2017-7592.patch')
| -rw-r--r-- | main/tiff/CVE-2017-7592.patch | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/main/tiff/CVE-2017-7592.patch b/main/tiff/CVE-2017-7592.patch new file mode 100644 index 0000000000..c60fa8323b --- /dev/null +++ b/main/tiff/CVE-2017-7592.patch @@ -0,0 +1,29 @@ +From 48780b4fcc425cddc4ef8ffdf536f96a0d1b313b Mon Sep 17 00:00:00 2001 +From: erouault <erouault> +Date: Wed, 11 Jan 2017 16:38:26 +0000 +Subject: [PATCH] =?UTF-8?q?*=20libtiff/tif=5Fgetimage.c:=20add=20explicit?= + =?UTF-8?q?=20uint32=20cast=20in=20putagreytile=20to=20avoid=20UndefinedBe?= + =?UTF-8?q?haviorSanitizer=20warning.=20Patch=20by=20Nicol=C3=A1s=20Pe?= + =?UTF-8?q?=C3=B1a.=20Fixes=20http://bugzilla.maptools.org/show=5Fbug.cgi?= + =?UTF-8?q?=3Fid=3D2658?= +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +--- + libtiff/tif_getimage.c | 2 +- + 2 files changed, 8 insertions(+), 1 deletion(-) + +diff --git a/libtiff/tif_getimage.c b/libtiff/tif_getimage.c +index fed31f1..2fa1775 100644 +--- a/libtiff/tif_getimage.c ++++ b/libtiff/tif_getimage.c +@@ -1302,7 +1302,7 @@ DECLAREContigPutFunc(putagreytile) + while (h-- > 0) { + for (x = w; x-- > 0;) + { +- *cp++ = BWmap[*pp][0] & (*(pp+1) << 24 | ~A1); ++ *cp++ = BWmap[*pp][0] & ((uint32)*(pp+1) << 24 | ~A1); + pp += samplesperpixel; + } + cp += toskew; |