void-packages/srcpkgs/jasper/patches/CVE-2016-2116.patch
Michael Gehring 4c035183ea jasper: various security fixes (Alpine patches)
CVE-2008-3520 CVE-2008-3522 CVE-2014-8137 CVE-2014-8138
CVE-2014-8157 CVE-2014-8158 CVE-2014-9029 CVE-2015-5203
CVE-2016-1577 CVE-2016-2089 CVE-2016-2116
2016-05-04 17:46:35 +02:00

14 lines
404 B
Diff

Description: Prevent jas_stream_t memory leak in jas_iccprof_createfrombuf()
Author: Tyler Hicks <tyhicks () canonical com>
--- jasper-1.900.1-debian1.orig/src/libjasper/base/jas_icc.c
+++ jasper-1.900.1-debian1/src/libjasper/base/jas_icc.c
@@ -1693,6 +1693,8 @@ jas_iccprof_t *jas_iccprof_createfrombuf
jas_stream_close(in);
return prof;
error:
+ if (in)
+ jas_stream_close(in);
return 0;
}