1. 22 Feb, 2019 1 commit
  2. 21 Feb, 2019 1 commit
  3. 19 Feb, 2019 6 commits
  4. 12 Feb, 2019 1 commit
  5. 11 Feb, 2019 3 commits
  6. 03 Feb, 2019 1 commit
  7. 02 Feb, 2019 4 commits
  8. 01 Feb, 2019 3 commits
  9. 29 Jan, 2019 3 commits
  10. 28 Jan, 2019 1 commit
  11. 23 Jan, 2019 1 commit
  12. 05 Jan, 2019 1 commit
  13. 14 Dec, 2018 1 commit
    • Hugo Lefeuvre's avatar
      tif_dir: unset transferfunction field if necessary · d0a842c5
      Hugo Lefeuvre authored
      The number of entries in the transfer table is determined as following:
      
      (td->td_samplesperpixel - td->td_extrasamples) > 1 ? 3 : 1
      
      This means that whenever td->td_samplesperpixel or td->td_extrasamples are
      modified we also need to make sure that the number of required entries in
      the transfer table didn't change.
      
      If it changed and the number of entries is higher than before we should
      invalidate the transfer table field and free previously allocated values.
      In the other case there's nothing to do, additional tf entries won't harm
      and properly written code will just ignore them since spp - es < 1.
      
      For instance this situation might happen when reading an OJPEG compressed
      image with missing SamplesPerPixel tag. In this case the SamplesPerPixel
      field might be updated after setting the transfer table.
      
      see http://bugzilla.maptools.org/show_bug.cgi?id=2500
      
      This commit addresses CVE-2018-19210.
      d0a842c5
  14. 08 Dec, 2018 1 commit
  15. 07 Dec, 2018 2 commits
  16. 01 Dec, 2018 1 commit
  17. 28 Nov, 2018 2 commits
  18. 20 Nov, 2018 2 commits
  19. 19 Nov, 2018 1 commit
  20. 18 Nov, 2018 1 commit
  21. 10 Nov, 2018 3 commits