File libraw-CVE-2015-3885.patch of Package libraw.6889

Overview Repositories Revisions Requests Users Attributes Meta

File libraw-CVE-2015-3885.patch of Package libraw.6889

From 4606c28f494a750892c5c1ac7903e62dd1c6fdb5 Mon Sep 17 00:00:00 2001
From: Alex Tutubalin <lexa@lexa.ru>
Date: Mon, 11 May 2015 11:52:20 +0300
Subject: [PATCH] 0.16.1: fix for dcraw ljpeg_start() vulnerability

Index: dcraw/dcraw.c
===================================================================
--- dcraw/dcraw.c.orig	2013-06-17 08:03:58.000000000 +0200
+++ dcraw/dcraw.c	2015-05-13 13:11:39.265230780 +0200
@@ -768,7 +768,8 @@
 
 int CLASS ljpeg_start (struct jhead *jh, int info_only)
 {
-  int c, tag, len;
+  int c, tag;
+  ushort len;
   uchar data[0x10000];
   const uchar *dp;
 
Index: internal/dcraw_common.cpp
===================================================================
--- internal/dcraw_common.cpp.orig	2013-08-23 04:59:54.000000000 +0200
+++ internal/dcraw_common.cpp	2015-05-13 13:11:39.266230793 +0200
@@ -548,7 +548,8 @@
 }
 int CLASS ljpeg_start (struct jhead *jh, int info_only)
 {
-  int c, tag, len;
+  int c, tag;
+  ushort len;
   uchar data[0x10000];
   const uchar *dp;

Places

File libraw-CVE-2015-3885.patch of Package libraw.6889

Places