Skip to content
This repository was archived by the owner on Dec 1, 2017. It is now read-only.

Commit c715336

Browse files
author
erouault
committed
* tools/tiff2pdf.c: avoid potential heap-based overflow in
t2p_readwrite_pdf_image_tile(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
1 parent 891b1b9 commit c715336

File tree

2 files changed

+7
-1
lines changed

2 files changed

+7
-1
lines changed

Diff for: ChangeLog

+6
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,9 @@
1+
2016-12-20 Even Rouault <even.rouault at spatialys.com>
2+
3+
* tools/tiff2pdf.c: avoid potential heap-based overflow in
4+
t2p_readwrite_pdf_image_tile().
5+
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
6+
17
2016-12-20 Even Rouault <even.rouault at spatialys.com>
28

39
* tools/tiff2pdf.c: avoid potential invalid memory read in

Diff for: tools/tiff2pdf.c

+1-1
Original file line numberDiff line numberDiff line change
@@ -2895,7 +2895,7 @@ tsize_t t2p_readwrite_pdf_image_tile(T2P* t2p, TIFF* input, TIFF* output, ttile_
28952895
return(0);
28962896
}
28972897
if(TIFFGetField(input, TIFFTAG_JPEGTABLES, &count, &jpt) != 0) {
2898-
if (count >= 4) {
2898+
if (count > 4) {
28992899
int retTIFFReadRawTile;
29002900
/* Ignore EOI marker of JpegTables */
29012901
_TIFFmemcpy(buffer, jpt, count - 2);

0 commit comments

Comments
 (0)