Blame SOURCES/0034-CVE-2022-2519-CVE-2022-2520-CVE-2022-2521-CVE-2022-2.patch

24df78
From 3635844b59578eb572372e7546548ea84c967ba1 Mon Sep 17 00:00:00 2001
24df78
From: Su_Laus <sulau@freenet.de>
24df78
Date: Sat, 20 Aug 2022 23:35:26 +0200
24df78
Subject: [PATCH] (CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 CVE-2022-2953)
24df78
 tiffcrop -S option: Make decision simpler.
24df78
24df78
(cherry picked from commit bad48e90b410df32172006c7876da449ba62cdba)
24df78
---
24df78
 tools/tiffcrop.c | 10 +++++-----
24df78
 1 file changed, 5 insertions(+), 5 deletions(-)
24df78
24df78
diff --git a/tools/tiffcrop.c b/tools/tiffcrop.c
24df78
index 27e6f81c..ff118496 100644
24df78
--- a/tools/tiffcrop.c
24df78
+++ b/tools/tiffcrop.c
24df78
@@ -2106,11 +2106,11 @@ void  process_command_opts (int argc, char *argv[], char *mp, char *mode, uint32
24df78
     }
24df78
     /*-- Check for not allowed combinations (e.g. -X, -Y and -Z, -z and -S are mutually exclusive) --*/
24df78
     char XY, Z, R, S;
24df78
-    XY = ((crop_data->crop_mode & CROP_WIDTH) || (crop_data->crop_mode & CROP_LENGTH));
24df78
-    Z = (crop_data->crop_mode & CROP_ZONES);
24df78
-    R = (crop_data->crop_mode & CROP_REGIONS);
24df78
-    S = (page->mode & PAGE_MODE_ROWSCOLS);
24df78
-    if ((XY && Z) || (XY && R) || (XY && S) || (Z && R) || (Z && S) || (R && S)) {
24df78
+    XY = ((crop_data->crop_mode & CROP_WIDTH) || (crop_data->crop_mode & CROP_LENGTH)) ? 1 : 0;
24df78
+    Z = (crop_data->crop_mode & CROP_ZONES) ? 1 : 0;
24df78
+    R = (crop_data->crop_mode & CROP_REGIONS) ? 1 : 0;
24df78
+    S = (page->mode & PAGE_MODE_ROWSCOLS) ? 1 : 0;
24df78
+    if (XY + Z + R + S > 1) {
24df78
         TIFFError("tiffcrop input error", "The crop options(-X|-Y), -Z, -z and -S are mutually exclusive.->Exit");
24df78
         exit(EXIT_FAILURE);
24df78
     }