jhead: add CVE-2016-3822.patch

fixes CVE-2016-3822, patch origin:
bae671597d
This commit is contained in:
Helmut Pozimski 2017-04-01 08:02:08 +02:00
parent 8639af39b1
commit 762cbe96aa
2 changed files with 20 additions and 1 deletions

View file

@ -0,0 +1,19 @@
--- exif.c
+++ exif.c
@@ -9,6 +9,7 @@
#include "jhead.h"
#include <math.h>
+#include <stdint.h>
static unsigned char * DirWithThumbnailPtrs;
static double FocalplaneXRes;
@@ -527,7 +528,7 @@
unsigned OffsetVal;
OffsetVal = Get32u(DirEntry+8);
// If its bigger than 4 bytes, the dir entry contains an offset.
- if (OffsetVal+ByteCount > ExifLength){
+ if (OffsetVal > UINT32_MAX - ByteCount || OffsetVal+ByteCount > ExifLength){
// Bogus pointer offset and / or bytecount value
ErrNonfatal("Illegal value pointer for tag %04x in Exif", Tag,0);
continue;

View file

@ -1,7 +1,7 @@
# Template file for 'jhead'
pkgname=jhead
version=3.00
revision=2
revision=3
build_style=gnu-makefile
short_desc="Display and manipulate EXIF header of JPEG images"
maintainer="Oliver Kiddle <okiddle@yahoo.co.uk>"