Blame SOURCES/jasper-2.0.14-CVE-2020-27828.patch

44d305
diff -urNp a/src/libjasper/jpc/jpc_enc.c b/src/libjasper/jpc/jpc_enc.c
44d305
--- a/src/libjasper/jpc/jpc_enc.c	2021-06-01 14:07:34.988061153 +0200
44d305
+++ b/src/libjasper/jpc/jpc_enc.c	2021-06-01 14:08:32.100584582 +0200
44d305
@@ -508,6 +508,10 @@ static jpc_enc_cp_t *cp_create(const cha
44d305
 			break;
44d305
 		case OPT_MAXRLVLS:
44d305
 			tccp->maxrlvls = atoi(jas_tvparser_getval(tvp));
44d305
+            if(tccp->maxrlvls > JPC_MAXRLVLS) {
44d305
+				jas_eprintf("invalid number of resolution levels upper than %d\n",JPC_MAXRLVLS);
44d305
+				goto error;
44d305
+			}
44d305
 			break;
44d305
 		case OPT_SOP:
44d305
 			cp->tcp.csty |= JPC_COD_SOP;