pyrox.dev / nixpkgs
lol
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

nixpkgs / pkgs / development / libraries / jasper / jasper-CVE-2014-8137-noabort.diff
at 15.09-beta 16 lines 716 B view raw
James Cook jasper: Patch for CVE-2014-8137 via RedHat.
951ac10a
1From RedHat: https://bugzilla.redhat.com/attachment.cgi?id=967284&action=diff 2 3--- jasper-1.900.1.orig/src/libjasper/jp2/jp2_dec.c 2014-12-11 14:30:54.193209780 +0100 4+++ jasper-1.900.1/src/libjasper/jp2/jp2_dec.c 2014-12-11 14:36:46.313217814 +0100 5@@ -291,7 +291,10 @@ jas_image_t *jp2_decode(jas_stream_t *in 6 case JP2_COLR_ICC: 7 iccprof = jas_iccprof_createfrombuf(dec->colr->data.colr.iccp, 8 dec->colr->data.colr.iccplen); 9- assert(iccprof); 10+ if (!iccprof) { 11+ jas_eprintf("error: failed to parse ICC profile\n"); 12+ goto error; 13+ } 14 jas_iccprof_gethdr(iccprof, &icchdr); 15 jas_eprintf("ICC Profile CS %08x\n", icchdr.colorspc); 16 jas_image_setclrspc(dec->image, fromiccpcs(icchdr.colorspc));