cheng/libtiff
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move mis-classified change note.

Browse Source
This commit is contained in:
Bob Friesenhahn 2016-11-12 21:43:44 +00:00
parent c22e3e5b42
commit 6ff69f4673
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
html/v4.0.7.html
View File

@ -96,12 +96,6 @@ information is located here:
td_stripbytecount to be non NULL. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2585
<LI> tools/tiffcrop.c: fix multiple uint32 overflows in
writeBufferToSeparateStrips(), writeBufferToContigTiles() and
writeBufferToSeparateTiles() that could cause heap buffer
overflows. Reported by Henri Salo from Nixu Corporation.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2592
<LI> libtiff/tif_strip.c: make TIFFNumberOfStrips() return the
td->td_nstrips value when it is non-zero, instead of
recomputing it. This is needed in TIFF_STRIPCHOP mode where
@ -309,6 +303,12 @@ information is located here:
<LI> tools/tiffinfo.c: fix out-of-bound read on some tiled images.
(http://bugzilla.maptools.org/show_bug.cgi?id=2517)
<LI> tools/tiffcrop.c: fix multiple uint32 overflows in
writeBufferToSeparateStrips(), writeBufferToContigTiles() and
writeBufferToSeparateTiles() that could cause heap buffer
overflows. Reported by Henri Salo from Nixu Corporation.
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2592
<LI> tools/tiffcrop.c: fix out-of-bound read of up to 3 bytes in
readContigTilesIntoBuffer(). Reported as MSVR 35092 by Axel
Souchet & Vishal Chauhan from the MSRC Vulnerabilities &
@ -393,7 +393,7 @@ information is located here:
</UL>
Last updated $Date: 2016-11-12 18:30:47 $.
Last updated $Date: 2016-11-12 21:43:44 $.
</BODY>
</HTML>