libtiff/tools
Even Rouault 2dae28a91b * tools/tiffcp.c: fix crash when converting YCbCr JPEG-compressed to none.
Based on patch by Tomasz Buchert (http://bugzilla.maptools.org/show_bug.cgi?id=2480)
Description: fix for Debian bug #741451
tiffcp crashes when converting JPEG-encoded TIFF to a different
encoding (like none or lzw). For example this will probably fail:
tiffcp -c none jpeg_encoded_file.tif output.tif
The reason is that when the input file contains JPEG data,
the tiffcp code forces conversion to RGB space. However,
the output normally inherits YCbCr subsampling parameters
from the input, which leads to a smaller working buffer
than necessary. The buffer is subsequently overrun inside
cpStripToTile() (called from writeBufferToContigTiles).
Note that the resulting TIFF file would be scrambled even
if tiffcp wouldn't crash, since the output file would contain
RGB data intepreted as subsampled YCbCr values.
This patch fixes the problem by forcing RGB space on the output
TIF if the input is JPEG-encoded and output is *not* JPEG-encoded.
Author: Tomasz Buchert <tomasz.buchert@inria.fr>
2014-12-21 16:28:37 +00:00
..
.cvsignore ignore various windows intermediate files 2012-06-16 17:05:37 +00:00
bmp2tiff.c Fix various crasher bugs on fuzzed images. 2014-12-21 15:15:31 +00:00
fax2ps.c * libtiff/tif_lzw.c: prevent potential null dereference of 2014-11-20 16:47:21 +00:00
fax2tiff.c * libtiff/tif_aux.c (_TIFFCheckRealloc): Improve error message so 2010-03-10 18:56:48 +00:00
gif2tiff.c * libtiff/tif_lzw.c: prevent potential null dereference of 2014-11-20 16:47:21 +00:00
Makefile.am * Makefile.am: Update to Automake 1.12.4 2012-09-20 13:50:27 +00:00
Makefile.in * tools/tiffdump.c: Fix double-free bug. 2014-12-06 15:58:40 +00:00
Makefile.lcc Properly set the binary mode for stdin stream as per bug 2006-04-20 12:36:23 +00:00
Makefile.vc introduce libport.h prototypes to reduce warnings 2009-01-22 20:53:07 +00:00
pal2rgb.c Fix the count for WhitePoint tag as per bug 2010-07-02 12:02:56 +00:00
ppm2tiff.c Improve previous patch for CVE-2012-4564. 2012-12-10 18:19:11 +00:00
ras2tiff.c * libtiff/tif_aux.c (_TIFFCheckRealloc): Improve error message so 2010-03-10 18:56:48 +00:00
rasterfile.h *** empty log message *** 2003-11-12 19:14:33 +00:00
raw2tiff.c * libtiff/tif_aux.c (_TIFFCheckRealloc): Improve error message so 2010-03-10 18:56:48 +00:00
rgb2ycbcr.c Replace sprintf with snprintf, to fix CVE-2013-1961. 2013-05-02 14:44:29 +00:00
sgi2tiff.c * libtiff/tif_aux.c (_TIFFCheckRealloc): Improve error message so 2010-03-10 18:56:48 +00:00
sgisv.c * libtiff/tif_aux.c (_TIFFCheckRealloc): Improve error message so 2010-03-10 18:56:48 +00:00
thumbnail.c tools/thumbnail.c, tools/tiffcrop.c: fix heap read over-run found with Valgrind and Address Sanitizer on test suite 2014-12-07 22:33:06 +00:00
tiff2bw.c Replace sprintf with snprintf, to fix CVE-2013-1961. 2013-05-02 14:44:29 +00:00
tiff2pdf.c Fix various crasher bugs on fuzzed images. 2014-12-21 15:15:31 +00:00
tiff2ps.c Replace sprintf with snprintf, to fix CVE-2013-1961. 2013-05-02 14:44:29 +00:00
tiff2rgba.c * tools/tiff2rgba.c (]): Fixed tiff2rgba usage message in that zip 2014-06-08 03:37:01 +00:00
tiffcmp.c * libtiff/tif_aux.c (_TIFFCheckRealloc): Improve error message so 2010-03-10 18:56:48 +00:00
tiffcp.c * tools/tiffcp.c: fix crash when converting YCbCr JPEG-compressed to none. 2014-12-21 16:28:37 +00:00
tiffcrop.c Fix various crasher bugs on fuzzed images. 2014-12-21 15:15:31 +00:00
tiffdither.c Replace sprintf with snprintf, to fix CVE-2013-1961. 2013-05-02 14:44:29 +00:00
tiffdump.c Fix various crasher bugs on fuzzed images. 2014-12-21 15:15:31 +00:00
tiffgt.c *** empty log message *** 2010-07-01 15:56:56 +00:00
tiffinfo.c initialize TIFFGetField() fetched values in tiffinfo.c 2013-07-10 00:44:22 +00:00
tiffinfoce.c * tools/tiffinfoce.c: strip byte counts are uint64* now 2010-12-11 19:33:48 +00:00
tiffmedian.c * libtiff/tif_aux.c (_TIFFCheckRealloc): Improve error message so 2010-03-10 18:56:48 +00:00
tiffset.c * tools/tiffset.c: tiffset now supports a -u option to unset a 2012-12-04 03:02:37 +00:00
tiffsplit.c * tools/tiffsplit.c (tiffcp): TIFFGetField count field should be 2011-10-22 17:03:00 +00:00
ycbcr.c * libtiff/tif_aux.c (_TIFFCheckRealloc): Improve error message so 2010-03-10 18:56:48 +00:00