Blame SOURCES/LibRaw-0.17.1-CVE-2015-8366-8367.patch

37fa59
diff -r -U3 LibRaw-0.17.1.orig/dcraw/dcraw.c LibRaw-0.17.1/dcraw/dcraw.c
37fa59
--- LibRaw-0.17.1.orig/dcraw/dcraw.c	2015-05-24 21:30:26.000000000 -0500
37fa59
+++ LibRaw-0.17.1/dcraw/dcraw.c	2015-12-01 07:47:00.086513959 -0600
37fa59
@@ -2901,6 +2901,10 @@
37fa59
       diff = diff ? -diff : 0x80;
37fa59
     if (ftell(ifp) + 12 >= seg[1][1])
37fa59
       diff = 0;
37fa59
+#ifdef LIBRAW_LIBRARY_BUILD
37fa59
+    if(pix>=raw_width*raw_height)
37fa59
+      throw LIBRAW_EXCEPTION_IO_CORRUPT;
37fa59
+#endif
37fa59
     raw_image[pix] = pred[pix & 1] += diff;
37fa59
     if (!(pix & 1) && HOLE(pix / raw_width)) pix += 2;
37fa59
   }