diff options
| author | Mingli Yu <Mingli.Yu@windriver.com> | 2016-12-07 16:01:11 +0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-12-08 10:26:11 +0000 |
| commit | 61d3feb9cad9f61f6551b43f4f19bfa33cadd275 (patch) | |
| tree | f55c3e0c3d981f1c0b11d34759c2a41050deafcc /meta/files/fs-perms.txt | |
| parent | fa107101ae42cf42a954c1c9af6a7d3ed298b384 (diff) | |
| download | openembedded-core-61d3feb9cad9f61f6551b43f4f19bfa33cadd275.tar.gz openembedded-core-61d3feb9cad9f61f6551b43f4f19bfa33cadd275.tar.bz2 openembedded-core-61d3feb9cad9f61f6551b43f4f19bfa33cadd275.zip | |
tiff: Security fix CVE-2016-9535
* libtiff/tif_predict.h, libtiff/tif_predict.c:
Replace assertions by runtime checks to avoid assertions in debug mode,
or buffer overflows in release mode. Can happen when dealing with
unusual tile size like YCbCr with subsampling.
External References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9535
Patch from:
https://github.com/vadz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1
https://github.com/vadz/libtiff/commit/6a984bf7905c6621281588431f384e79d11a2e33
Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Diffstat (limited to 'meta/files/fs-perms.txt')
0 files changed, 0 insertions, 0 deletions