Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12-SP1:Update
jasper.25970
jasper-CVE-2017-5499.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File jasper-CVE-2017-5499.patch of Package jasper.25970
Index: jasper-1.900.14/src/libjasper/jpc/jpc_cs.c =================================================================== --- jasper-1.900.14.orig/src/libjasper/jpc/jpc_cs.c +++ jasper-1.900.14/src/libjasper/jpc/jpc_cs.c @@ -554,6 +554,10 @@ static int jpc_siz_getparms(jpc_ms_t *ms } siz->comps[i].sgnd = (tmp >> 7) & 1; siz->comps[i].prec = (tmp & 0x7f) + 1; + if (siz->comps[i].prec > 38) { + jas_eprintf("invalid component bit depth %d\n", siz->comps[i].prec); + goto error; + } } if (jas_stream_eof(in)) { goto error;
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
