File libjpeg-turbo-CVE-2020-13790.patch of Package libjpeg62-turbo.25864

Index: libjpeg-turbo-1.5.3/rdppm.c
===================================================================
--- libjpeg-turbo-1.5.3.orig/rdppm.c	2020-06-08 13:20:48.169387235 +0200
+++ libjpeg-turbo-1.5.3/rdppm.c	2020-06-08 13:35:54.278991585 +0200
@@ -23,6 +23,7 @@
  */
 
 #include "cdjpeg.h"             /* Common decls for cjpeg/djpeg applications */
+#include "jpegint.h"
 
 #ifdef PPM_SUPPORTED
 
@@ -425,7 +426,7 @@ start_input_ppm (j_compress_ptr cinfo, c
     /* On 16-bit-int machines we have to be careful of maxval = 65535 */
     source->rescale = (JSAMPLE *)
       (*cinfo->mem->alloc_small) ((j_common_ptr) cinfo, JPOOL_IMAGE,
-                                  (size_t) (((long) maxval + 1L) *
+                                  (size_t) (((long) MAX(maxval, 255) + 1L) *
                                             sizeof(JSAMPLE)));
     half_maxval = maxval / 2;
     for (val = 0; val <= (long) maxval; val++) {
openSUSE Build Service is sponsored by