mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-06-09 19:13:26 +03:00
giflib: patch CVE-2025-31344
Pulled from https://github.com/OpenMandrivaAssociation/giflib/blob/master/giflib-5.2.2-cve-2025-31344.patch
(cherry picked from commit ca159cd3b8
)
This commit is contained in:
parent
c51600518c
commit
4fb382bf71
2 changed files with 16 additions and 0 deletions
15
pkgs/by-name/gi/giflib/CVE-2025-31344.patch
Normal file
15
pkgs/by-name/gi/giflib/CVE-2025-31344.patch
Normal file
|
@ -0,0 +1,15 @@
|
|||
diff -up giflib-5.2.2/gif2rgb.c.omv~ giflib-5.2.2/gif2rgb.c
|
||||
--- giflib-5.2.2/gif2rgb.c.omv~ 2025-04-07 21:44:54.956355983 +0200
|
||||
+++ giflib-5.2.2/gif2rgb.c 2025-04-07 21:45:29.630769589 +0200
|
||||
@@ -329,6 +329,11 @@ static void DumpScreen2RGB(char *FileNam
|
||||
GifRow = ScreenBuffer[i];
|
||||
GifQprintf("\b\b\b\b%-4d", ScreenHeight - i);
|
||||
for (j = 0; j < ScreenWidth; j++) {
|
||||
+ /* Check if color is within color palete */
|
||||
+ if (GifRow[j] >= ColorMap->ColorCount) {
|
||||
+ GIF_EXIT(GifErrorString(
|
||||
+ D_GIF_ERR_IMAGE_DEFECT));
|
||||
+ }
|
||||
ColorMapEntry = &ColorMap->Colors[GifRow[j]];
|
||||
Buffers[0][j] = ColorMapEntry->Red;
|
||||
Buffers[1][j] = ColorMapEntry->Green;
|
|
@ -18,6 +18,7 @@ stdenv.mkDerivation rec {
|
|||
patches =
|
||||
[
|
||||
./CVE-2021-40633.patch
|
||||
./CVE-2025-31344.patch
|
||||
]
|
||||
++ lib.optionals stdenv.hostPlatform.isMinGW [
|
||||
# Build dll libraries.
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue