35 lines
1.2 KiB
Diff
35 lines
1.2 KiB
Diff
|
From c0cca041fc4fb6748d8dff3675fe7a839253d668 Mon Sep 17 00:00:00 2001
|
||
|
From: Sandro Mani <manisandro@gmail.com>
|
||
|
Date: Tue, 5 Dec 2023 16:24:32 -0700
|
||
|
Subject: [PATCH] Fix CVE-2022-28506
|
||
|
|
||
|
From: giflib-5.2.1-17.fc39.src.rpm
|
||
|
Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-28506
|
||
|
Upstream: https://sourceforge.net/p/giflib/bugs/159/
|
||
|
|
||
|
Signed-off-by: Sandro Mani <manisandro@gmail.com>
|
||
|
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
|
||
|
---
|
||
|
gif2rgb.c | 5 +++++
|
||
|
1 file changed, 5 insertions(+)
|
||
|
|
||
|
diff --git a/gif2rgb.c b/gif2rgb.c
|
||
|
index 8d7c0ff..d9a469f 100644
|
||
|
--- a/gif2rgb.c
|
||
|
+++ b/gif2rgb.c
|
||
|
@@ -294,6 +294,11 @@ static void DumpScreen2RGB(char *FileName, int OneFileFlag,
|
||
|
GifRow = ScreenBuffer[i];
|
||
|
GifQprintf("\b\b\b\b%-4d", ScreenHeight - i);
|
||
|
for (j = 0, BufferP = Buffer; j < ScreenWidth; j++) {
|
||
|
+ /* Check if color is within color palete */
|
||
|
+ if (GifRow[j] >= ColorMap->ColorCount)
|
||
|
+ {
|
||
|
+ GIF_EXIT(GifErrorString(D_GIF_ERR_IMAGE_DEFECT));
|
||
|
+ }
|
||
|
ColorMapEntry = &ColorMap->Colors[GifRow[j]];
|
||
|
*BufferP++ = ColorMapEntry->Red;
|
||
|
*BufferP++ = ColorMapEntry->Green;
|
||
|
--
|
||
|
2.43.0
|
||
|
|