Kees Cook <[email protected]> wrote:

> The attached TIFF will crash libtiff, as investigated by the PSP hacking
> community[1], the Ubuntu bug report[2], and upstream[3].
>
> Attached patch seems to solve the underflow, but has not been regression
> tested.

I've looked through the upstream bug report you mentioned, and I have
applied Jeffrey Pfau's patch instead.  After applying this patch, I am
able to view your sample image, and the corrupted LZW table scanline
error is issued.  Thanks for drawing my attention to this problem!

I really hope they get around to release 3.9.0 one of these days.  I'm
tempted to roll my own 3.9.0-pre release and upload it.

-- 
Jay Berkenbilt <[email protected]>



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to