third_party/lcms2-2.6/0003-uninit.patch - Issue 2362813002: Fix use uninitialized value and stack buffer overflow read

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: third_party/lcms2-2.6/0003-uninit.patch

Issue 2362813002: Fix use uninitialized value and stack buffer overflow read (Closed)

Patch Set: Created 4 years, 2 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

OLD	NEW
(Empty)
	1 diff --git a/third_party/lcms2-2.6/src/cmstypes.c b/third_party/lcms2-2.6/src/cm stypes.c

	2 index 9fe5e2a..feba387 100644

	3 --- a/third_party/lcms2-2.6/src/cmstypes.c

	4 +++ b/third_party/lcms2-2.6/src/cmstypes.c

	5 @@ -2985,7 +2985,7 @@ void Type_ColorantTable_Read(struct _cms_typehandler_stru ct self, cmsIOHANDLER

	6 for (i=0; i < Count; i++) {

	7

	8 if (io ->Read(io, Name, 32, 1) != 1) goto Error;

	9 - Name[33] = 0;

	10 + Name[32] = 0;

	11

	12 if (!_cmsReadUInt16Array(io, 3, PCS)) goto Error;

	13

	14 @@ -3112,6 +3112,7 @@ void Type_NamedColor_Read(struct _cms_typehandler_struct self, cmsIOHANDLER* i

	15

	16 memset(Colorant, 0, sizeof(Colorant));

	17 if (io -> Read(io, Root, 32, 1) != 1) return NULL;

	18 + Root[32] = 0;

	19 if (!_cmsReadUInt16Array(io, 3, PCS)) goto Error;

	20 if (!_cmsReadUInt16Array(io, nDeviceCoords, Colorant)) goto Error;

	21

OLD	NEW