Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP3:Update
python-Pillow.35230
CVE-2021-25290.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File CVE-2021-25290.patch of Package python-Pillow.35230
Index: Pillow-7.2.0/Tests/test_tiff_crashes.py =================================================================== --- Pillow-7.2.0.orig/Tests/test_tiff_crashes.py +++ Pillow-7.2.0/Tests/test_tiff_crashes.py @@ -24,8 +24,14 @@ from .helper import on_ci "Tests/images/crash_1.tif", "Tests/images/crash_2.tif", "Tests/images/crash-2020-10-test.tif", - "Tests/images/crash-1152ec2d1a1a71395b6f2ce6721c38924d025bf3.tif", + "Tests/images/crash-0c7e0e8e11ce787078f00b5b0ca409a167f070e0.tif", "Tests/images/crash-0e16d3bfb83be87356d026d66919deaefca44dac.tif", + "Tests/images/crash-1152ec2d1a1a71395b6f2ce6721c38924d025bf3.tif", + "Tests/images/crash-1185209cf7655b5aed8ae5e77784dfdd18ab59e9.tif", + "Tests/images/crash-338516dbd2f0e83caddb8ce256c22db3bd6dc40f.tif", + "Tests/images/crash-4f085cc12ece8cde18758d42608bed6a2a2cfb1c.tif", + "Tests/images/crash-86214e58da443d2b80820cff9677a38a33dcbbca.tif", + "Tests/images/crash-f46f5b2f43c370fe65706c11449f567ecc345e74.tif", ], ) @pytest.mark.filterwarnings("ignore:Possibly corrupt EXIF data") Index: Pillow-7.2.0/src/libImaging/TiffDecode.c =================================================================== --- Pillow-7.2.0.orig/src/libImaging/TiffDecode.c +++ Pillow-7.2.0/src/libImaging/TiffDecode.c @@ -36,6 +36,10 @@ tsize_t _tiffReadProc(thandle_t hdata, t TRACE(("_tiffReadProc: %d \n", (int)size)); dump_state(state); + if (state->loc > state->eof) { + TIFFError("_tiffReadProc", "Invalid Read at loc %d, eof: %d", state->loc, state->eof); + return 0; + } to_read = min(size, min(state->size, (tsize_t)state->eof) - (tsize_t)state->loc); TRACE(("to_read: %d\n", (int)to_read));
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor