summaryrefslogtreecommitdiffstats
path: root/main/tiff/libtiff-CVE-2013-4244.patch
diff options
context:
space:
mode:
authorNatanael Copa <ncopa@alpinelinux.org>2014-06-24 12:22:39 +0000
committerNatanael Copa <ncopa@alpinelinux.org>2014-06-24 12:23:53 +0000
commitcab4b718abc4b3179498c45354d0adf651156789 (patch)
tree9b580428b60cb26c61e7d4bcef58ac0f2c85d89a /main/tiff/libtiff-CVE-2013-4244.patch
parentd911f2daafe662bea88751ecc9a84d183a76fdeb (diff)
downloadaports-cab4b718abc4b3179498c45354d0adf651156789.tar.bz2
aports-cab4b718abc4b3179498c45354d0adf651156789.tar.xz
main/tiff: security fix es for CVE-2013-4243 and CVE-2013-4244
ref #3081
Diffstat (limited to 'main/tiff/libtiff-CVE-2013-4244.patch')
-rw-r--r--main/tiff/libtiff-CVE-2013-4244.patch15
1 files changed, 15 insertions, 0 deletions
diff --git a/main/tiff/libtiff-CVE-2013-4244.patch b/main/tiff/libtiff-CVE-2013-4244.patch
new file mode 100644
index 000000000..792e07698
--- /dev/null
+++ b/main/tiff/libtiff-CVE-2013-4244.patch
@@ -0,0 +1,15 @@
+diff --git a/tools/gif2tiff.c b/tools/gif2tiff.c
+index 375b152..2731273 100644
+--- a/tools/gif2tiff.c
++++ b/tools/gif2tiff.c
+@@ -402,6 +402,10 @@ process(register int code, unsigned char** fill)
+ }
+
+ if (oldcode == -1) {
++ if (code >= clear) {
++ fprintf(stderr, "bad input: code=%d is larger than clear=%d\n",code, clear);
++ return 0;
++ }
+ *(*fill)++ = suffix[code];
+ firstchar = oldcode = code;
+ return 1;