File libraw-CVE-2015-3885.patch of Package libraw.30665
From 4606c28f494a750892c5c1ac7903e62dd1c6fdb5 Mon Sep 17 00:00:00 2001
From: Alex Tutubalin <lexa@lexa.ru>
Date: Mon, 11 May 2015 11:52:20 +0300
Subject: [PATCH] 0.16.1: fix for dcraw ljpeg_start() vulnerability
Index: internal/dcraw_common.cpp
===================================================================
--- internal/dcraw_common.cpp.orig 2013-08-23 04:59:54.000000000 +0200
+++ internal/dcraw_common.cpp 2015-05-13 13:11:39.266230793 +0200
@@ -548,7 +548,8 @@
}
int CLASS ljpeg_start (struct jhead *jh, int info_only)
{
- int c, tag, len;
+ int c, tag;
+ ushort len;
uchar data[0x10000];
const uchar *dp;