File openjpeg-CVE-2020-27842.patch of Package openjpeg.26661

Index: openjpeg-1.5.2/libopenjpeg/t2.c
===================================================================
--- openjpeg-1.5.2.orig/libopenjpeg/t2.c
+++ openjpeg-1.5.2/libopenjpeg/t2.c
@@ -163,7 +163,15 @@ static int t2_encode_packet(opj_tcd_tile
 	if (!layno) {
 		for (bandno = 0; bandno < res->numbands; bandno++) {
 			opj_tcd_band_t *band = &res->bands[bandno];
-			opj_tcd_precinct_t *prc = &band->precincts[precno];
+			opj_tcd_precinct_t *prc;
+
+                        /* Avoid out of bounds access of https://github.com/uclouvain/openjpeg/issues/1294 */
+			/* but likely not a proper fix. */
+                        if (precno >= res->pw * res->ph) {
+                                return OPJ_FALSE;
+                        }
+
+			prc = &band->precincts[precno];
 			tgt_reset(prc->incltree);
 			tgt_reset(prc->imsbtree);
 			for (cblkno = 0; cblkno < prc->cw * prc->ch; cblkno++) {
openSUSE Build Service is sponsored by