Blame SOURCES/jasper-2.0.14-CVE-2020-27828.patch

491fbb
diff -urNp a/src/libjasper/jpc/jpc_enc.c b/src/libjasper/jpc/jpc_enc.c
491fbb
--- a/src/libjasper/jpc/jpc_enc.c	2021-06-01 14:07:34.988061153 +0200
491fbb
+++ b/src/libjasper/jpc/jpc_enc.c	2021-06-01 14:08:32.100584582 +0200
491fbb
@@ -508,6 +508,10 @@ static jpc_enc_cp_t *cp_create(const cha
491fbb
 			break;
491fbb
 		case OPT_MAXRLVLS:
491fbb
 			tccp->maxrlvls = atoi(jas_tvparser_getval(tvp));
491fbb
+            if(tccp->maxrlvls > JPC_MAXRLVLS) {
491fbb
+				jas_eprintf("invalid number of resolution levels upper than %d\n",JPC_MAXRLVLS);
491fbb
+				goto error;
491fbb
+			}
491fbb
 			break;
491fbb
 		case OPT_SOP:
491fbb
 			cp->tcp.csty |= JPC_COD_SOP;