summaryrefslogtreecommitdiff
path: root/third_party/lcms/0010-memory-leak-Type_Curve_Read.patch
diff options
context:
space:
mode:
Diffstat (limited to 'third_party/lcms/0010-memory-leak-Type_Curve_Read.patch')
-rw-r--r--third_party/lcms/0010-memory-leak-Type_Curve_Read.patch28
1 files changed, 28 insertions, 0 deletions
diff --git a/third_party/lcms/0010-memory-leak-Type_Curve_Read.patch b/third_party/lcms/0010-memory-leak-Type_Curve_Read.patch
new file mode 100644
index 0000000000..7edc7f9e0f
--- /dev/null
+++ b/third_party/lcms/0010-memory-leak-Type_Curve_Read.patch
@@ -0,0 +1,28 @@
+diff --git a/third_party/lcms/src/cmstypes.c b/third_party/lcms/src/cmstypes.c
+index 06742b5..9fe5e2a 100644
+--- a/third_party/lcms/src/cmstypes.c
++++ b/third_party/lcms/src/cmstypes.c
+@@ -1112,7 +1112,10 @@ void *Type_Curve_Read(struct _cms_typehandler_struct* self, cmsIOHANDLER* io, cm
+ NewGamma = cmsBuildTabulatedToneCurve16(self ->ContextID, Count, NULL);
+ if (!NewGamma) return NULL;
+
+- if (!_cmsReadUInt16Array(io, Count, NewGamma -> Table16)) return NULL;
++ if (!_cmsReadUInt16Array(io, Count, NewGamma -> Table16)) {
++ cmsFreeToneCurve(NewGamma);
++ return NULL;
++ }
+
+ *nItems = 1;
+ return NewGamma;
+@@ -2350,7 +2353,10 @@ cmsStage* ReadCLUT(struct _cms_typehandler_struct* self, cmsIOHANDLER* io, cmsUI
+
+ for (i=0; i < Data ->nEntries; i++) {
+
+- if (io ->Read(io, &v, sizeof(cmsUInt8Number), 1) != 1) return NULL;
++ if (io ->Read(io, &v, sizeof(cmsUInt8Number), 1) != 1) {
++ cmsStageFree(CLUT);
++ return NULL;
++ }
+ Data ->Tab.T[i] = FROM_8_TO_16(v);
+ }
+