ports/graphics/tiff/files/patch-git-02-275735d0354e39c0ac1dc3c0db2120d6f31d1990
Daniel Engberg a52fed3d45 graphics/tiff: Update to 4.4.0
* Add libdeflate for improved performance as dependency
* Add zstd as dependency, this is the default in Alpine, Arch Linux,
  Debian, Fedora and OpenSUSE
* Backport upstream commit dd1bcc7abb26094e93636e85520f0d8f81ab0fab to
  fix CVE-2022-2056, CVE-2022-2057 and CVE-2022-2058
* Backport upstream commit 275735d0354e39c0ac1dc3c0db2120d6f31d1990 to
  fix CVE-2022-34526

PR:		265164
Approved by:	portmgr (antoine)
Exp-run by:	antoine
2022-08-16 23:45:38 +02:00

28 lines
894 B
Text

From 275735d0354e39c0ac1dc3c0db2120d6f31d1990 Mon Sep 17 00:00:00 2001
From: Even Rouault <even.rouault@spatialys.com>
Date: Mon, 27 Jun 2022 16:09:43 +0200
Subject: [PATCH] _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a
codec-specific tag and the codec is not configured (fixes #433)
This avoids crashes when querying such tags
---
libtiff/tif_dirinfo.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/libtiff/tif_dirinfo.c b/libtiff/tif_dirinfo.c
index c30f569b..3371cb5c 100644
--- libtiff/tif_dirinfo.c
+++ libtiff/tif_dirinfo.c
@@ -1191,6 +1191,9 @@ _TIFFCheckFieldIsValidForCodec(TIFF *tif, ttag_t tag)
default:
return 1;
}
+ if( !TIFFIsCODECConfigured(tif->tif_dir.td_compression) ) {
+ return 0;
+ }
/* Check if codec specific tags are allowed for the current
* compression scheme (codec) */
switch (tif->tif_dir.td_compression) {
--
GitLab