17 lines
573 B
Plaintext
17 lines
573 B
Plaintext
$NetBSD: patch-CVE-2014-8157,v 1.1 2015/03/11 20:58:26 spz Exp $
|
|
|
|
patch for CVE-2014-8157 from
|
|
http://pkgs.fedoraproject.org/cgit/jasper.git/tree/jasper-CVE-2014-8157.patch
|
|
|
|
--- jasper/src/libjasper/jpc/jpc_dec.c.orig 2012-08-08 08:01:36.000000000 +0000
|
|
+++ jasper/src/libjasper/jpc/jpc_dec.c
|
|
@@ -496,7 +496,7 @@ static int jpc_dec_process_sot(jpc_dec_t
|
|
dec->curtileendoff = 0;
|
|
}
|
|
|
|
- if (JAS_CAST(int, sot->tileno) > dec->numtiles) {
|
|
+ if (JAS_CAST(int, sot->tileno) >= dec->numtiles) {
|
|
jas_eprintf("invalid tile number in SOT marker segment\n");
|
|
return -1;
|
|
}
|