File libraw-CVE-2025-43963.patch of Package libraw.38396

Index: LibRaw-0.20.2/src/decoders/load_mfbacks.cpp
===================================================================
--- LibRaw-0.20.2.orig/src/decoders/load_mfbacks.cpp
+++ LibRaw-0.20.2/src/decoders/load_mfbacks.cpp
@@ -211,7 +211,8 @@ int LibRaw::phase_one_correct()
           off_412 = ftell(ifp) - 38;
         }
       }
-      else if (tag == 0x041f && !qlin_applied)
+      else if (tag == 0x041f && !qlin_applied && ph1.split_col > 0 && ph1.split_col < raw_width
+		&& ph1.split_row > 0 && ph1.split_row < raw_height)
       { /* Quadrant linearization */
         ushort lc[2][2][16], ref[16];
         int qr, qc;
@@ -288,7 +289,8 @@ int LibRaw::phase_one_correct()
         }
         qmult_applied = 1;
       }
-      else if (tag == 0x0431 && !qmult_applied)
+      else if (tag == 0x0431 && !qmult_applied && ph1.split_col > 0 && ph1.split_col < raw_width
+		&& ph1.split_row > 0 && ph1.split_row < raw_height)
       { /* Quadrant combined */
         ushort lc[2][2][7], ref[7];
         int qr, qc;
openSUSE Build Service is sponsored by