Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
DISCONTINUED:openSUSE:11.2
imlib
imlib-CVE-2007-3568.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File imlib-CVE-2007-3568.patch of Package imlib
The _LoadBMP function in imlib 1.9.15 and earlier allowed context-dependent attackers to cause a denial of service (infinite loop) via a BMP image with a Bits Per Page (BPP) value of 0. --- Imlib/load.c +++ Imlib/load.c @@ -673,16 +673,30 @@ #endif bpp = (int)word; - if (bpp != 1 && bpp != 4 && bpp != 8 && bpp && 16 && bpp != 24 && bpp != 32) + + switch(bpp) { - fprintf(stderr, "IMLIB ERROR: unknown bitdepth in file\n"); - return NULL; + case 1: + case 4: + case 8: + case 16: + case 24: + case 32: + break; + + default: + { + fprintf(stderr, "IMLIB ERROR: unknown bitdepth in file\n"); + return NULL; + } } + fread(dbuf, 4, 4, file); #if __BYTE_ORDER == __BIG_ENDIAN __bswap_32(dbuf[0]); #endif comp = (int)dbuf[0]; + if (comp != BI_RGB && comp != BI_RLE4 && comp != BI_RLE8 && comp != BI_BITFIELDS) { fprintf(stderr, "IMLIB ERROR: unknown encoding in Windows BMP file\n");
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
