• Skip to sidebar navigation
  • Skip to content

Bitbucket

  • More
    ProjectsRepositories
  • Help
    • Online help
    • Learn Git
    • Welcome to Bitbucket
    • Keyboard shortcuts
  • Log In
Alexander Dahl
  1. Alexander Dahl

buildroot

Public
Actions
  • Clone
  • Compare

Learn more about cloning repositories

You have read-only access

Navigation
  • Source
  • Commits
  • Branches
  • All Branches Graph
  • Forks
  1. Alexander Dahl
  2. buildroot

Source

buildroot/package/jasper/0004-fix-CVE-2014-8137-2.patch
Gustavo ZacariasGustavo Zacarias committed b6e4e9de41c19 Dec 2014
Raw file
Source viewDiff to previous
 
1
See https://bugzilla.redhat.com/show_bug.cgi?id=1173157
2
​
3
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
4
​
5
--- jasper-1.900.1.orig/src/libjasper/jp2/jp2_dec.c 2014-12-11 14:30:54.193209780 +0100
6
+++ jasper-1.900.1/src/libjasper/jp2/jp2_dec.c  2014-12-11 14:36:46.313217814 +0100
7
@@ -291,7 +291,10 @@ jas_image_t *jp2_decode(jas_stream_t *in
8
    case JP2_COLR_ICC:
9
        iccprof = jas_iccprof_createfrombuf(dec->colr->data.colr.iccp,
10
          dec->colr->data.colr.iccplen);
11
-       assert(iccprof);
12
+       if (!iccprof) {
13
+           jas_eprintf("error: failed to parse ICC profile\n");
14
+           goto error;
15
+       }
16
        jas_iccprof_gethdr(iccprof, &icchdr);
17
        jas_eprintf("ICC Profile CS %08x\n", icchdr.colorspc);
18
        jas_image_setclrspc(dec->image, fromiccpcs(icchdr.colorspc));
  • Git repository management for enterprise teams powered by Atlassian Bitbucket
  • Atlassian Bitbucket v6.7.2
  • Documentation
  • Request a feature
  • About
  • Contact Atlassian
Atlassian

Everything looks good. We'll let you know here if there's anything you should know about.