File jasper-CVE-2016-9560.patch of Package jasper.18194

--- jasper-1.900.14/src/libjasper/jpc/jpc_dec.c	2016-10-26 08:57:31.000000000 +0200
+++ jasper-1.900.14/src/libjasper/jpc/jpc_dec.c	2016-12-13 10:46:55.441456344 +0100
@@ -678,7 +678,7 @@
 	uint_fast32_t tmpxend;
 	uint_fast32_t tmpyend;
 	jpc_dec_cp_t *cp;
-	jpc_tsfb_band_t bnds[64];
+	jpc_tsfb_band_t bnds[JPC_MAXBANDS];
 	jpc_pchg_t *pchg;
 	int pchgno;
 	jpc_dec_cmpt_t *cmpt;
Only in jasper-1.900.14/src/libjasper/jpc: jpc_dec.c.orig
openSUSE Build Service is sponsored by