cirros-testvm/src-cirros/buildroot-2015.05/package/jasper/0004-fix-CVE-2014-8137-2.patch

   1 See https://bugzilla.redhat.com/show_bug.cgi?id=1173157
   2
   3 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
   4
   5 --- jasper-1.900.1.orig/src/libjasper/jp2/jp2_dec.c     2014-12-11 14:30:54.193209780 +0100
   6 +++ jasper-1.900.1/src/libjasper/jp2/jp2_dec.c  2014-12-11 14:36:46.313217814 +0100
   7 @@ -291,7 +291,10 @@ jas_image_t *jp2_decode(jas_stream_t *in
   8         case JP2_COLR_ICC:
   9                 iccprof = jas_iccprof_createfrombuf(dec->colr->data.colr.iccp,
  10                   dec->colr->data.colr.iccplen);
  11 -               assert(iccprof);
  12 +               if (!iccprof) {
  13 +                       jas_eprintf("error: failed to parse ICC profile\n");
  14 +                       goto error;
  15 +               }
  16                 jas_iccprof_gethdr(iccprof, &icchdr);
  17                 jas_eprintf("ICC Profile CS %08x\n", icchdr.colorspc);
  18                 jas_image_setclrspc(dec->image, fromiccpcs(icchdr.colorspc));