Blame SOURCES/CVE-2020-11763.patch

b85ae4
diff -urNp a/IlmImf/ImfRleCompressor.cpp b/IlmImf/ImfRleCompressor.cpp
b85ae4
--- a/IlmImf/ImfRleCompressor.cpp	2020-06-02 12:29:00.823667417 +0200
b85ae4
+++ b/IlmImf/ImfRleCompressor.cpp	2020-06-02 12:32:51.134011377 +0200
b85ae4
@@ -135,6 +135,11 @@ rleUncompress (int inLength, int maxLeng
b85ae4
 	    if (0 > (maxLength -= count))
b85ae4
 		return 0;
b85ae4
 
b85ae4
+        // check the input buffer is big enough to contain
b85ae4
+        // 'count' bytes of remaining data
b85ae4
+        if (inLength < 0)
b85ae4
+          return 0;
b85ae4
+
b85ae4
 	    while (count-- > 0)
b85ae4
 		*out++ = *(char *) (in++);
b85ae4
 	}