File openjpeg-CVE-2020-27842.patch of Package openjpeg.26661
Index: openjpeg-1.5.2/libopenjpeg/t2.c
===================================================================
--- openjpeg-1.5.2.orig/libopenjpeg/t2.c
+++ openjpeg-1.5.2/libopenjpeg/t2.c
@@ -163,7 +163,15 @@ static int t2_encode_packet(opj_tcd_tile
if (!layno) {
for (bandno = 0; bandno < res->numbands; bandno++) {
opj_tcd_band_t *band = &res->bands[bandno];
- opj_tcd_precinct_t *prc = &band->precincts[precno];
+ opj_tcd_precinct_t *prc;
+
+ /* Avoid out of bounds access of https://github.com/uclouvain/openjpeg/issues/1294 */
+ /* but likely not a proper fix. */
+ if (precno >= res->pw * res->ph) {
+ return OPJ_FALSE;
+ }
+
+ prc = &band->precincts[precno];
tgt_reset(prc->incltree);
tgt_reset(prc->imsbtree);
for (cblkno = 0; cblkno < prc->cw * prc->ch; cblkno++) {