File openjpeg-CVE-2018-21010.patch of Package openjpeg

Overview Repositories Revisions Requests Users Attributes Meta

File openjpeg-CVE-2018-21010.patch of Package openjpeg

Index: openjpeg-1.5.2/applications/common/color.c
===================================================================
--- openjpeg-1.5.2.orig/applications/common/color.c
+++ openjpeg-1.5.2/applications/common/color.c
@@ -384,6 +384,10 @@ fprintf(stderr,"%s:%d:color_apply_icc_pr
 
 	if(image->numcomps > 2)/* RGB, RGBA */
    {
+	   if ((image->comps[0].w == image->comps[1].w &&
+			image->comps[0].w == image->comps[2].w) &&
+		   (image->comps[0].h == image->comps[1].h &&
+			image->comps[0].h == image->comps[2].h)) {
 	unsigned short *inbuf, *outbuf, *in, *out;
 	max = max_w * max_h; nr_samples = max * 3 * sizeof(unsigned short);
 	in = inbuf = (unsigned short*)malloc(nr_samples);
@@ -413,6 +417,12 @@ fprintf(stderr,"%s:%d:color_apply_icc_pr
 	*b++ = (int)*out++;
   }
 	free(inbuf); free(outbuf);
+   } else {
+		   fprintf(stderr,
+				   "[ERROR] Image components should have the same width and height\n");
+		   cmsDeleteTransform(transform);
+		   return;
+	   }
    }
 	else /* GRAY, GRAYA */
    {

Places

File openjpeg-CVE-2018-21010.patch of Package openjpeg

Places