mirror of
https://git.freebsd.org/ports.git
synced 2025-07-11 22:39:16 -04:00
9ad3263e80
- Security fixes Multiple integer overflows Buffer overflow in the jas_stream_printf execute arbitrary code on decodes images Security: CVE-2008-3520 Security: CVE-2008-3522 Security: CVE-2011-4516 Security: CVE-2011-4517 PR: 163718 Obtained from: Fedora Feature safe: yes
12 lines
482 B
C
12 lines
482 B
C
--- src/libjasper/mif/mif_cod.c.orig 2007-01-19 22:43:05.000000000 +0100
|
|
+++ src/libjasper/mif/mif_cod.c 2013-04-17 22:32:23.000000000 +0200
|
|
@@ -438,8 +438,7 @@
|
|
int cmptno;
|
|
mif_cmpt_t **newcmpts;
|
|
assert(maxcmpts >= hdr->numcmpts);
|
|
- newcmpts = (!hdr->cmpts) ? jas_malloc(maxcmpts * sizeof(mif_cmpt_t *)) :
|
|
- jas_realloc(hdr->cmpts, maxcmpts * sizeof(mif_cmpt_t *));
|
|
+ newcmpts = jas_realloc2(hdr->cmpts, maxcmpts, sizeof(mif_cmpt_t *));
|
|
if (!newcmpts) {
|
|
return -1;
|
|
}
|