XFA: Upgrade to libtiff 4.0.6.

third_party/libtiff/tif_strip.c

-/* $Id: tif_strip.c,v 1.35 2012-06-06 05:33:55 fwarmerdam Exp $ */
+/* $Id: tif_strip.c,v 1.36 2015-06-07 22:35:40 bfriesen Exp $ */
 
 /*
  * Copyright (c) 1991-1997 Sam Leffler
  * Copyright (c) 1991-1997 Silicon Graphics, Inc.
  *
  * Permission to use, copy, modify, distribute, and sell this software and 
  * its documentation for any purpose is hereby granted without fee, provided
  * that (i) the above copyright notices and this permission notice appear in
  * all copies of the software and related documentation, and (ii) the names of
  * Sam Leffler and Silicon Graphics may not be used in any advertising or
@@ skipping 298 matching lines @@
                         scanline_size = (samplingrow_size/ycbcrsubsampling[1]);
                 }
                 else
                 {
                         uint64 scanline_samples;
                         scanline_samples=_TIFFMultiply64(tif,td->td_imagewidth,td->td_samplesperpixel,module);
                         scanline_size=TIFFhowmany_64(_TIFFMultiply64(tif,scanline_samples,td->td_bitspersample,module),8);
                 }
         }
         else
+        {
                 scanline_size=TIFFhowmany_64(_TIFFMultiply64(tif,td->td_imagewidth,td->td_bitspersample,module),8);
+        }
+        if (scanline_size == 0)
+        {
+                TIFFErrorExt(tif->tif_clientdata,module,"Computed scanline size is zero");
+                return 0;
+        }
         return(scanline_size);
 }
 tmsize_t
 TIFFScanlineSize(TIFF* tif)
 {
         static const char module[] = "TIFFScanlineSize";
         uint64 m;
         tmsize_t n;
         m=TIFFScanlineSize64(tif);
         n=(tmsize_t)m;
-        if ((uint64)n!=m)
-        {
+        if ((uint64)n!=m) {
                 TIFFErrorExt(tif->tif_clientdata,module,"Integer arithmetic overflow");
                 n=0;
         }
         return(n);
 }
 
 /*
  * Return the number of bytes required to store a complete
  * decoded and packed raster scanline (as opposed to the
  * I/O size returned by TIFFScanlineSize which may be less
@@ skipping 31 matching lines @@
 }
 
 /* vim: set ts=8 sts=8 sw=8 noet: */
 /*
  * Local Variables:
  * mode: c
  * c-basic-offset: 8
  * fill-column: 78
  * End:
  */
-