File openexr-CVE-2021-20303.patch of Package openexr.21776
diff --git a/OpenEXR/IlmImf/ImfTiledMisc.cpp b/OpenEXR/IlmImf/ImfTiledMisc.cpp
index b8e195fd8..89ef97cb5 100644
--- a/IlmImf/ImfTiledMisc.cpp
+++ b/IlmImf/ImfTiledMisc.cpp
@@ -97,13 +97,14 @@ dataWindowForTile (const TileDescription &tileDesc,
V2i tileMin = V2i (minX + dx * tileDesc.xSize,
minY + dy * tileDesc.ySize);
- V2i tileMax = tileMin + V2i (tileDesc.xSize - 1, tileDesc.ySize - 1);
+ int64_t tileMaxX = int64_t(tileMin[0]) + tileDesc.xSize - 1;
+ int64_t tileMaxY = int64_t(tileMin[1]) + tileDesc.ySize - 1;
V2i levelMax = dataWindowForLevel
(tileDesc, minX, maxX, minY, maxY, lx, ly).max;
- tileMax = V2i (std::min (tileMax[0], levelMax[0]),
- std::min (tileMax[1], levelMax[1]));
+ V2i tileMax = V2i (std::min (tileMaxX, int64_t(levelMax[0])),
+ std::min (tileMaxY, int64_t(levelMax[1])));
return Box2i (tileMin, tileMax);
}