diff options
| -rw-r--r-- | third_party/libtiff/0009-HeapBufferOverflow-PixarLogDecode.patch | 2 | ||||
| -rw-r--r-- | third_party/libtiff/tif_pixarlog.c | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/third_party/libtiff/0009-HeapBufferOverflow-PixarLogDecode.patch b/third_party/libtiff/0009-HeapBufferOverflow-PixarLogDecode.patch index 745da03d80..57dbe2efb7 100644 --- a/third_party/libtiff/0009-HeapBufferOverflow-PixarLogDecode.patch +++ b/third_party/libtiff/0009-HeapBufferOverflow-PixarLogDecode.patch @@ -23,7 +23,7 @@ index b93b4c7..0674fa4 100644 return (0); } + /* Check that we will not fill more than what was allocated */ -+ if (sp->stream.avail_out > sp->tbuf_size) ++ if ((tmsize_t)sp->stream.avail_out > sp->tbuf_size) + { + TIFFErrorExt(tif->tif_clientdata, module, "sp->stream.avail_out > sp->tbuf_size"); + return (0); diff --git a/third_party/libtiff/tif_pixarlog.c b/third_party/libtiff/tif_pixarlog.c index 0674fa48d6..29535d31ee 100644 --- a/third_party/libtiff/tif_pixarlog.c +++ b/third_party/libtiff/tif_pixarlog.c @@ -784,7 +784,7 @@ PixarLogDecode(TIFF* tif, uint8* op, tmsize_t occ, uint16 s) return (0); } /* Check that we will not fill more than what was allocated */ - if (sp->stream.avail_out > sp->tbuf_size) + if ((tmsize_t)sp->stream.avail_out > sp->tbuf_size) { TIFFErrorExt(tif->tif_clientdata, module, "sp->stream.avail_out > sp->tbuf_size"); return (0); |