File libraw-CVE-2017-13735.patch of Package libraw.8527
Index: LibRaw-0.17.1/internal/dcraw_common.cpp
===================================================================
--- LibRaw-0.17.1.orig/internal/dcraw_common.cpp 2017-09-26 13:54:19.873225768 +0200
+++ LibRaw-0.17.1/internal/dcraw_common.cpp 2017-09-26 13:55:54.890869969 +0200
@@ -2512,6 +2512,10 @@ void CLASS kodak_radc_load_raw()
checkCancel();
#endif
FORC3 mul[c] = getbits(6);
+#ifdef LIBRAW_LIBRARY_BUILD
+ if(!mul[0] || !mul[1] || !mul[2])
+ throw LIBRAW_EXCEPTION_IO_CORRUPT;
+#endif
FORC3 {
val = ((0x1000000/last[c] + 0x7ff) >> 12) * mul[c];
s = val > 65564 ? 10:12;