pyrox.dev / nixpkgs
lol
fork atom

giflib: patch CVE-2025-31344

Pulled from https://github.com/OpenMandrivaAssociation/giflib/blob/master/giflib-5.2.2-cve-2025-31344.patch

Martin Weinelt ca159cd3 81c8dee7

+16
unified split
+15
pkgs/by-name/gi/giflib/CVE-2025-31344.patch
··· 1 + diff -up giflib-5.2.2/gif2rgb.c.omv~ giflib-5.2.2/gif2rgb.c 2 + --- giflib-5.2.2/gif2rgb.c.omv~ 2025-04-07 21:44:54.956355983 +0200 3 + +++ giflib-5.2.2/gif2rgb.c 2025-04-07 21:45:29.630769589 +0200 4 + @@ -329,6 +329,11 @@ static void DumpScreen2RGB(char *FileNam 5 + GifRow = ScreenBuffer[i]; 6 + GifQprintf("\b\b\b\b%-4d", ScreenHeight - i); 7 + for (j = 0; j < ScreenWidth; j++) { 8 + + /* Check if color is within color palete */ 9 + + if (GifRow[j] >= ColorMap->ColorCount) { 10 + + GIF_EXIT(GifErrorString( 11 + + D_GIF_ERR_IMAGE_DEFECT)); 12 + + } 13 + ColorMapEntry = &ColorMap->Colors[GifRow[j]]; 14 + Buffers[0][j] = ColorMapEntry->Red; 15 + Buffers[1][j] = ColorMapEntry->Green;
+1
pkgs/by-name/gi/giflib/package.nix
··· 18 18 patches = 19 19 [ 20 20 ./CVE-2021-40633.patch 21 + ./CVE-2025-31344.patch 21 22 ] 22 23 ++ lib.optionals stdenv.hostPlatform.isMinGW [ 23 24 # Build dll libraries.