From bb3724aa4701bc30a93b8323a71ac578789cb784 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Thu, 20 Aug 2009 13:30:59 +0000 Subject: main/tiff: security patches --- main/tiff/tiffsplit-fname-overflow.patch | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 main/tiff/tiffsplit-fname-overflow.patch (limited to 'main/tiff/tiffsplit-fname-overflow.patch') diff --git a/main/tiff/tiffsplit-fname-overflow.patch b/main/tiff/tiffsplit-fname-overflow.patch new file mode 100644 index 00000000..cc225890 --- /dev/null +++ b/main/tiff/tiffsplit-fname-overflow.patch @@ -0,0 +1,19 @@ +--- tiff-3.8.2/tools/tiffsplit.c.orig 2005-12-07 04:48:33.000000000 -0500 ++++ tiff-3.8.2/tools/tiffsplit.c 2006-06-01 21:20:25.039944864 -0400 +@@ -61,14 +61,13 @@ + return (-3); + } + if (argc > 2) +- strcpy(fname, argv[2]); ++ snprintf(fname, sizeof(fname), "%s", argv[2]); + in = TIFFOpen(argv[1], "r"); + if (in != NULL) { + do { + char path[1024+1]; + newfilename(); +- strcpy(path, fname); +- strcat(path, ".tif"); ++ snprintf(path, sizeof(path), "%s.tif", fname); + out = TIFFOpen(path, TIFFIsBigEndian(in)?"wb":"wl"); + if (out == NULL) + return (-2); -- cgit v1.2.3