Commit Graph

3137 Commits

Author SHA1 Message Date
Bob Friesenhahn
64b6f939bf Change download URL from ftp to https protocol. 2018-11-10 13:46:14 -06:00
Bob Friesenhahn
6c3e4801bd HOWTO-RELEASE: Add GPG release file signing procedure. 2018-11-10 13:43:05 -06:00
Bob Friesenhahn
b8eac98dd0 libtiff 4.0.10 released. 2018-11-10 09:33:11 -06:00
Bob Friesenhahn
126a949736 Change COMPRESSION_ZSTD to 50000 and COMPRESSION_WEBP to 50001. 2018-11-10 08:58:18 -06:00
Bob Friesenhahn
779e54ca32 Added preliminary release notes for release 4.0.10 2018-11-04 14:14:25 -06:00
Bob Friesenhahn
2480971bba tiff2pdf: Eliminate compiler warning about snprintf output truncation when formatting pdf_datetime. 2018-11-03 13:27:20 -05:00
Olivier Paquet
2d25c90327 Merge branch 'no_tif_platform_console' into 'master'
Remove builtin support for GUI warning and error message boxes

See merge request libtiff/libtiff!24
2018-11-03 16:51:41 +00:00
Bob Friesenhahn
ed624dfe48 tiffcrop.c: Eliminate compiler warning about snprintf output truncation when formatting filenum. 2018-11-03 10:00:11 -05:00
Bob Friesenhahn
d1b5834dfe TWebPVGetField(): Add apparently missing break statement impacting TIFFTAG_WEBP_LOSSLESS. 2018-11-03 09:41:15 -05:00
Bob Friesenhahn
34b5be5a2e Eliminate compiler warnings about duplicate definitions of streq/strneq macros. 2018-11-03 09:35:19 -05:00
Bob Friesenhahn
64ee065f13 Ignore generated files 2018-11-03 09:34:52 -05:00
Bob Friesenhahn
b72c756c43 Remove and ignore files which are a product of autogen.sh 2018-11-03 09:22:11 -05:00
Bob Friesenhahn
90771bcd56 Fix TIFFErrorExt() formatting of size_t type for 32-bit compiles.
o
2018-11-02 07:34:22 -05:00
Even Rouault
99b10edde9
tiff2bw: avoid null pointer dereference in case of out of memory situation. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2819 / CVE-2018-18661 2018-10-30 18:50:27 +01:00
Even Rouault
67b755b334
tiffio.h: fix comment 2018-10-30 18:49:53 +01:00
Even Rouault
7030e8acbc Merge branch 'header2' into 'master'
Fix 725279bd: Standalone tif_predict.h: tiff.h should be tiffiop.h

See merge request libtiff/libtiff!41
2018-10-26 17:55:49 +00:00
Kurt Schwehr
f05e33ac98 Fix 725279bd: Standalone tif_predict.h: tiff.h should be tiffiop.h 2018-10-26 10:38:03 -07:00
Even Rouault
eaad7b257f Merge branch 'headers' into 'master'
Add includes to headers to allow them to stand alone.

See merge request libtiff/libtiff!40
2018-10-25 08:05:08 +00:00
Kurt Schwehr
725279bd1f Add includes to headers to allow them to stand alone.
This allows compilers that can do header stand alone header parsing
to process libtiff.
2018-10-24 16:29:33 -07:00
Even Rouault
4429f75fab
LZMAPreEncode: emit verbose error if lzma_stream_encoder() fails (typically because not enough memory available) 2018-10-18 11:10:31 +02:00
Even Rouault
d780c9db3f
tif_webp.c: fix previous commit that broke scanline decoding 2018-10-17 23:36:26 +02:00
Even Rouault
00a987988c
tif_webp.c: fix potential read outside libwebp buffer on corrupted images 2018-10-17 21:32:25 +02:00
Even Rouault
183102bc26 Merge branch 'jbig_decode_overflow' into 'master'
JBIG: fix potential out-of-bounds write in JBIGDecode()

See merge request libtiff/libtiff!38
2018-10-14 15:57:45 +00:00
Even Rouault
681748ec2f
JBIG: fix potential out-of-bounds write in JBIGDecode()
JBIGDecode doesn't check if the user provided buffer is large enough
to store the JBIG decoded image, which can potentially cause out-of-bounds
write in the buffer.
This issue was reported and analyzed by Thomas Dullien.

Also fixes a (harmless) potential use of uninitialized memory when
tif->tif_rawsize > tif->tif_rawcc

And in case libtiff is compiled with CHUNKY_STRIP_READ_SUPPORT, make sure
that whole strip data is provided to JBIGDecode()
2018-10-14 16:45:14 +02:00
Even Rouault
d438fab328
tif_webp.c: fix scanline reading/writing 2018-10-05 22:59:49 +02:00
Even Rouault
6aae33f758
WEBP codec: initialize nSamples in TWebPSetupDecode() and TWebPSetupEncode() 2018-10-05 22:03:24 +02:00
Even Rouault
1a926533b8 Merge branch 'tif_webp' into 'master'
webp support

See merge request libtiff/libtiff!32
2018-10-05 19:41:16 +00:00
Norman Barker
9eacd59fec webp in tiff 2018-10-05 11:21:17 -05:00
Even Rouault
31374a7bf1 Merge branch 'master' into 'master'
fix three potential vulnerabilities.

See merge request libtiff/libtiff!33
2018-09-17 18:33:33 +00:00
Young_X
97c95667f6 fix out-of-bound read on some tiled images. 2018-09-08 15:07:53 +08:00
Young_X
6da1fb3f64 avoid potential int32 overflows in multiply_ms() 2018-09-08 14:46:27 +08:00
Young_X
f1b94e8a3b only read/write TIFFTAG_GROUP3OPTIONS or TIFFTAG_GROUP4OPTIONS if compression is COMPRESSION_CCITTFAX3 or COMPRESSION_CCITTFAX4 2018-09-08 14:36:12 +08:00
Even Rouault
981e43ecae
TIFFSetupStrips(): avoid potential uint32 overflow on 32-bit systems with large number of strips. Probably relates to http://bugzilla.maptools.org/show_bug.cgi?id=2788 / CVE-2018-10779 2018-08-15 16:34:40 +02:00
Even Rouault
97a9e1a677
ZSTD: fix flush issue that can cause endless loop in ZSTDEncode()
Fixes https://github.com/OSGeo/gdal/issues/833
2018-08-07 22:37:08 +02:00
Even Rouault
7bad03e938 Merge branch 'fix_bug_2800' into 'master'
Fix libtiff 4.0.8 regression when reading LZW-compressed strips with scanline API

See merge request libtiff/libtiff!31
2018-08-07 10:01:33 +00:00
Even Rouault
4af64003c8
Fix libtiff 4.0.8 regression when reading LZW-compressed strips with scanline API
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2800
2018-08-07 11:54:27 +02:00
Even Rouault
48e2696e9b
Add tag and pseudo-tag definitions for ESRI LERC codec (out of tree codec whose source is at https://github.com/OSGeo/gdal/blob/master/gdal/frmts/gtiff/tif_lerc.c) 2018-07-05 21:01:02 +02:00
Even Rouault
1db1efeb20
Fix TIFFTAG_ZSTD_LEVEL pseudo tag value to be > 65536, and the next one in the series 2018-07-02 20:07:45 +02:00
Stefan Weil
924405d5b3 Remove builtin support for GUI warning and error message boxes
Now warnings always go to the console by default unless applications
define their own warning and error handlers.

GUI applications (and Windows CE) are required to define such handlers.

Signed-off-by: Stefan Weil <sw@weilnetz.de>
2018-05-25 08:42:50 +02:00
Even Rouault
58a898cb44
LZWDecodeCompat(): fix potential index-out-of-bounds write. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2780 / CVE-2018-8905
The fix consists in using the similar code LZWDecode() to validate we
don't write outside of the output buffer.
2018-05-12 15:32:31 +02:00
Even Rouault
b68fc85f39
TIFFFetchNormalTag(): avoid (probably false positive) clang-tidy clang-analyzer-core.NullDereference warnings 2018-05-12 14:36:49 +02:00
Even Rouault
de144fd228
TIFFWriteDirectorySec: avoid assertion. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2795. CVE-2018-10963 2018-05-12 14:24:15 +02:00
Even Rouault
6150fd4349
tif_color.c: fix code comment 2018-05-04 21:03:41 +02:00
Even Rouault
be9c1f7785 Merge branch 'fuzzer-fix' into 'master'
remove a pointless multiplication and a variable that's not necessary

See merge request libtiff/libtiff!29
2018-04-17 20:35:25 +00:00
Paul Kehrer
ba1eba2761 remove a pointless multiplication and a variable that's not necessary 2018-04-17 22:38:41 +08:00
Even Rouault
80ff5e2c39 Merge branch 'ossfuzz' into 'master'
move oss-fuzz build script and fuzzer into libtiff tree

See merge request libtiff/libtiff!28
2018-04-17 08:52:07 +00:00
Paul Kehrer
a6cfa01085 move oss-fuzz build script and fuzzer into libtiff tree 2018-04-17 08:52:07 +00:00
Even Rouault
c4f9b53aa5
_TIFFGetMaxColorChannels: update for LOGLUV, ITULAB and ICCLAB that have 3 color channels 2018-04-14 17:17:34 +02:00
Even Rouault
47be9914dd
Fix MSVC warning 2018-04-13 00:07:13 +02:00
Even Rouault
18d85181e9 Merge branch 'master' into 'master'
Fix NULL pointer dereference in TIFFPrintDirectory (bugzilla 2778/CVE-2018-7456)

See merge request libtiff/libtiff!27
2018-04-12 20:09:44 +00:00