61e069e164
Fixes: CVE-2016-2116 - Memory leak in jas_iccprof_createfrombuf causing memory consumption. CVE-2016-1577 - Double free vulnerability in jas_iccattrval_destroy. CVE-2016-1867 - out-of-bounds read in the jpc_pi_nextcprl() function. CVE-2015-5221 - Use-after-free and double-free flaws in Jasper JPEG-2000 library. CVE-2015-5203 - double free in jasper_image_stop_load() Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
19 lines
534 B
Diff
19 lines
534 B
Diff
Description: Prevent jas_stream_t memory leak in jas_iccprof_createfrombuf()
|
|
Author: Tyler Hicks <tyhicks () canonical com>
|
|
|
|
From: http://seclists.org/oss-sec/2016/q1/att-507/CVE-2016-2116.patch
|
|
|
|
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
|
|
|
|
--- jasper-1.900.1-debian1.orig/src/libjasper/base/jas_icc.c
|
|
+++ jasper-1.900.1-debian1/src/libjasper/base/jas_icc.c
|
|
@@ -1693,6 +1693,8 @@ jas_iccprof_t *jas_iccprof_createfrombuf
|
|
jas_stream_close(in);
|
|
return prof;
|
|
error:
|
|
+ if (in)
|
|
+ jas_stream_close(in);
|
|
return 0;
|
|
}
|
|
|