129675 2006-04-12 03:59 0000 media-libs/tiff: <3.8.1 several vulns: DoS, int. overflow, double-free vuln (CVE-2006-202[456], CVE-2006-2120) 2006-11-11 20:06:21 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 A2 [glsa] Falco P2 minor --- 1 falco@gentoo.org security@gentoo.org graphics@gentoo.org marienz@gentoo.org sekretarz@gentoo.org falco@gentoo.org 2006-04-12 03:59:59 0000 As said in http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 , tiffinfo crashes with the proposed files. My tiff-3.7.3 (last stable, x86) is affected. kuickshow, and xzgv totally crash. gv, Gimp and konqueror can't display the picture but they recover the error and they don't crash. My Firefox doesn't display the picture at all. However, it may be possible to send a special .tiff file via a mail or a web server and to cause the client's application to crash. Since i wasn't able to find an example of mail-application or web-application crashing, please check if this is possible. Thanks to ed who has indicated us the bug. falco@gentoo.org 2006-04-13 06:30:05 0000 This seems related with #1029 : http://bugzilla.remotesensing.org/show_bug.cgi?id=1029 which has a CVE entry : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0405 Or, at least, it has the same effects (application crash) Corrected in upstream CVS. koon@gentoo.org 2006-04-22 03:27:28 0000 graphics / taviso: care to patch ? jaervosz@gentoo.org 2006-04-25 22:36:07 0000 Upstream bug 1102 is CVE-2006-202{4-6}. Fixes are here: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933 koon@gentoo.org 2006-04-28 11:05:13 0000 Ccing marienz as he did a recent tiff bump. Marien: Does it include this vulnerability fix ? marienz@gentoo.org 2006-04-28 11:14:51 0000 A tiff bump? Me? :) The only thing I committed to tiff was a digest fix for bug 131396. For bumps you want vapier or before that sekretarz. falco@gentoo.org 2006-05-05 10:03:14 0000 Hi; Other vulns are related to the original one, including possible code execution. See SA-19838 http://secunia.com/advisories/19838/ It's note a B3 anymore, it's an A2. it seems hard to "grep" the different patches from the CVS tree. 3.8.1 is out since a while and corrects the vuln. 3.8.2 is in portage and ~arched. Graphics team, do you want to mark stable 3.8.2 or (introduce in portage and) mark stable 3.8.1 ? falco@gentoo.org 2006-05-09 10:12:34 0000 Hi all, i've merged the diff from debian [1] correcting CVE-2006-202[456], and the one from Red Hat [2] correcting CVE-2006-2120. Debian hasn't corrected CVE-2006-2120 issue, don't ask me why. Please verify this patch and add it to portage, then mark stable either 3.8.1, or 3.7.3/3.7.4 patched. adm64, ppc, sparc, x86 : 3.7.4 alpha, hppa, ppc64, sh : 3.7.3 falco@gentoo.org 2006-05-09 10:13:11 0000 Created an attachment (id=86490) patch 3.7.4 falco@gentoo.org 2006-05-09 10:15:47 0000 Created an attachment (id=86492) patch 3.7.3 (not verified) falco@gentoo.org 2006-05-09 10:21:41 0000 references of #7 [1] http://security.debian.org/pool/updates/main/t/tiff/tiff_3.7.2-3sarge1.diff.gz [2] https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=128248&action=edit dercorny@gentoo.org 2006-05-27 01:08:36 0000 arches, please test and mark 3.8.2 stable, thank you grobian@gentoo.org 2006-05-27 01:59:57 0000 ppc-macos stable yoswink@gentoo.org 2006-05-27 05:16:17 0000 stable on alpha. ssuominen@gentoo.org 2006-05-27 05:22:18 0000 I unkeyworded media-libs/tiff-3.8.2 , and emerged it with collision-protect. Builds fine on x86. Runtime testcase I made was, wget ftp://ftp.remotesensing.org/pub/libtiff/pics-3.8.0.tar.gz tar xfvz pics-3.8.0.tar.gz cd libtiffpic tiff2pdf g3test.tif > g3test.pdf And verified conversion went okay with PDF reader. Good to go stable on x86. Portage 2.0.54-r2 (default-linux/x86/2006.0, gcc-3.4.5, glibc-2.3.6-r3, 2.6.16-gentoo-r4 i686) ================================================================= System uname: 2.6.16-gentoo-r4 i686 AMD Athlon(tm) XP 2200+ Gentoo Base System version 1.6.14 dev-lang/python: 2.4.2 dev-python/pycrypto: [Not Present] dev-util/ccache: [Not Present] dev-util/confcache: [Not Present] sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=athlon-xp -O2 -pipe -g" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib/X11/xkb" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=athlon-xp -O2 -pipe -g" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig collision-protect distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://trumpetti.atm.tut.fi/gentoo/" LANG="en_US.utf8" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://trumpetti.atm.tut.fi/gentoo-portage" USE="x86 3dnow 3dnowext X a52 aac alsa apm audiofile avi berkdb bitmap-fonts bzip2 cli crypt dri emboss encode expat fam ffmpeg flac foomaticdb fortran gdbm gif gstreamer gtk gtk2 id3 imagemagick imlib ipv6 isdnlog jpeg libg++ libwww mad mikmod mmx mmxext motif mp3 mp4live mpeg mpeg2 musicbrainz ncurses nptl nptlonly ogg opengl oss pam pcre pdflib perl pic player png pppd python quicktime readline reflection sdk sdl session spl sse ssl tcltk tcpd theora tiff truetype truetype-fonts type1-fonts udev unicode userlocales vorbis win32codecs xine xml xml2 xorg xv xvid zlib userland_GNU kernel_linux elibc_glibc" Unset: CTARGET, INSTALL_MASK, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS, PORTAGE_RSYNC_OPTS, PORTDIR_OVERLAY tcort@gentoo.org 2006-05-28 08:18:55 0000 amd64 stable. nerdboy@gentoo.org 2006-05-28 11:20:59 0000 Marked stable on x86, and versions prior to 3.7.3 removed. Still several arches to go (which I can't test on) for complete stable on 3.8.2... halcy0n@gentoo.org 2006-05-28 11:26:04 0000 compnerd: pretty pretty please let the x86 team handle our bugs in the future :) Thanks halcy0n@gentoo.org 2006-05-28 11:35:26 0000 Err, and by compnerd, I mean nerdboy...for some reason, I always mix you two up... ssuominen@gentoo.org 2006-05-28 13:22:55 0000 Sorry about bugspam, removing CC.. dertobi123@gentoo.org 2006-05-28 14:07:08 0000 hppa stable dercorny@gentoo.org 2006-05-30 09:51:24 0000 GLSA 200605-17 Thanks everybody 86490 2006-05-09 10:13 0000 patch 3.7.4 tiff-3.7.4-bug129675.patch text/plain ZGlmZiAtdU5yIC1yIHRpZmYtMy43LjQtb3JpZy9saWJ0aWZmL3RpZl9jb2xvci5jIHRpZmYtMy43 LjQvbGlidGlmZi90aWZfY29sb3IuYwotLS0gdGlmZi0zLjcuNC1vcmlnL2xpYnRpZmYvdGlmX2Nv bG9yLmMJMjAwNS0wNy0wNCAxMzoyMDowNy4wMDAwMDAwMDAgKzAyMDAKKysrIHRpZmYtMy43LjQv bGlidGlmZi90aWZfY29sb3IuYwkyMDA2LTA1LTA5IDE5OjAyOjQ0LjE3MzUzMzc1MCArMDIwMApA QCAtOTIsNiArOTIsMTEgQEAKIAlZZyA9IFRJRkZtYXgoWWcsIGNpZWxhYi0+ZGlzcGxheS5kX1kw Ryk7CiAJWWIgPSBUSUZGbWF4KFliLCBjaWVsYWItPmRpc3BsYXkuZF9ZMEIpOwogCisJLyogQXZv aWQgb3ZlcmZsb3cgaW4gY2FzZSBvZiB3cm9uZyBpbnB1dCB2YWx1ZXMgKi8KKwlZciA9IFRJRkZt aW4oWXIsIGNpZWxhYi0+ZGlzcGxheS5kX1lDUik7CisJWWcgPSBUSUZGbWluKFlnLCBjaWVsYWIt PmRpc3BsYXkuZF9ZQ0cpOworCVliID0gVElGRm1pbihZYiwgY2llbGFiLT5kaXNwbGF5LmRfWUNC KTsKKwogCS8qIFR1cm4gbHVtaW5vc2l0eSB0byBjb2xvdXIgdmFsdWUuICovCiAJaSA9IChpbnQp KChZciAtIGNpZWxhYi0+ZGlzcGxheS5kX1kwUikgLyBjaWVsYWItPnJzdGVwKTsKIAlpID0gVElG Rm1pbihjaWVsYWItPnJhbmdlLCBpKTsKZGlmZiAtdU5yIC1yIHRpZmYtMy43LjQtb3JpZy9saWJ0 aWZmL3RpZl9kaXJyZWFkLmMgdGlmZi0zLjcuNC9saWJ0aWZmL3RpZl9kaXJyZWFkLmMKLS0tIHRp ZmYtMy43LjQtb3JpZy9saWJ0aWZmL3RpZl9kaXJyZWFkLmMJMjAwNS0wOC0xNyAxNTowNToyNi4w MDAwMDAwMDAgKzAyMDAKKysrIHRpZmYtMy43LjQvbGlidGlmZi90aWZfZGlycmVhZC5jCTIwMDYt MDUtMDkgMTk6MDA6MTEuOTEyMDE4MDAwICswMjAwCkBAIC03ODQsMTMgKzc4NCwyMCBAQAogCWlu dCB3ID0gVElGRkRhdGFXaWR0aCgoVElGRkRhdGFUeXBlKSBkaXItPnRkaXJfdHlwZSk7CiAJdHNp emVfdCBjYyA9IGRpci0+dGRpcl9jb3VudCAqIHc7CiAKKwkvKiBDaGVjayBmb3Igb3ZlcmZsb3cu ICovCisJaWYgKCFkaXItPnRkaXJfY291bnQgfHwgIXcgfHwgY2MgLyB3ICE9ICh0c2l6ZV90KWRp ci0+dGRpcl9jb3VudCkKKwkJZ290byBiYWQ7CisKIAlpZiAoIWlzTWFwcGVkKHRpZikpIHsKIAkJ aWYgKCFTZWVrT0sodGlmLCBkaXItPnRkaXJfb2Zmc2V0KSkKIAkJCWdvdG8gYmFkOwogCQlpZiAo IVJlYWRPSyh0aWYsIGNwLCBjYykpCiAJCQlnb3RvIGJhZDsKIAl9IGVsc2UgewotCQlpZiAoZGly LT50ZGlyX29mZnNldCArIGNjID4gdGlmLT50aWZfc2l6ZSkKKwkJLyogQ2hlY2sgZm9yIG92ZXJm bG93LiAqLworCQlpZiAoKHRzaXplX3QpZGlyLT50ZGlyX29mZnNldCArIGNjIDwgKHRzaXplX3Qp ZGlyLT50ZGlyX29mZnNldAorCQkgICAgfHwgKHRzaXplX3QpZGlyLT50ZGlyX29mZnNldCArIGNj IDwgY2MKKwkJICAgIHx8ICh0c2l6ZV90KWRpci0+dGRpcl9vZmZzZXQgKyBjYyA+ICh0c2l6ZV90 KXRpZi0+dGlmX3NpemUpCiAJCQlnb3RvIGJhZDsKIAkJX1RJRkZtZW1jcHkoY3AsIHRpZi0+dGlm X2Jhc2UgKyBkaXItPnRkaXJfb2Zmc2V0LCBjYyk7CiAJfQpkaWZmIC11TnIgLXIgdGlmZi0zLjcu NC1vcmlnL2xpYnRpZmYvdGlmX2ZheDMuYyB0aWZmLTMuNy40L2xpYnRpZmYvdGlmX2ZheDMuYwot LS0gdGlmZi0zLjcuNC1vcmlnL2xpYnRpZmYvdGlmX2ZheDMuYwkyMDA1LTA3LTI5IDE1OjIxOjEw LjAwMDAwMDAwMCArMDIwMAorKysgdGlmZi0zLjcuNC9saWJ0aWZmL3RpZl9mYXgzLmMJMjAwNi0w NS0wOSAxOTowMDoxMS45MTYwMTgyNTAgKzAyMDAKQEAgLTEwNTksNiArMTA1OSwxMCBAQAogCWlm ICh0aWYtPnRpZl9kYXRhKSB7CiAJCUZheDNDb2RlY1N0YXRlKiBzcCA9IERlY29kZXJTdGF0ZSh0 aWYpOwogCisJCWFzc2VydCAoc3AgIT0gMCk7CisJCXRpZi0+dGlmX3RhZ21ldGhvZHMudmdldGZp ZWxkID0gc3AtPmIudmdldHBhcmVudDsKKwkJdGlmLT50aWZfdGFnbWV0aG9kcy52c2V0ZmllbGQg PSBzcC0+Yi52c2V0cGFyZW50OworCiAJCWlmIChzcC0+cnVucykKIAkJCV9USUZGZnJlZShzcC0+ cnVucyk7CiAJCWlmIChzcC0+cmVmbGluZSkKQEAgLTExMTksNiArMTEyMyw4IEBACiBGYXgzVlNl dEZpZWxkKFRJRkYqIHRpZiwgdHRhZ190IHRhZywgdmFfbGlzdCBhcCkKIHsKIAlGYXgzQmFzZVN0 YXRlKiBzcCA9IEZheDNTdGF0ZSh0aWYpOworCWFzc2VydCAoc3AgIT0gMCk7CisJYXNzZXJ0IChz cC0+dnNldHBhcmVudCAhPSAwKTsKIAogCXN3aXRjaCAodGFnKSB7CiAJY2FzZSBUSUZGVEFHX0ZB WE1PREU6CmRpZmYgLXVOciAtciB0aWZmLTMuNy40LW9yaWcvbGlidGlmZi90aWZfanBlZy5jIHRp ZmYtMy43LjQvbGlidGlmZi90aWZfanBlZy5jCi0tLSB0aWZmLTMuNy40LW9yaWcvbGlidGlmZi90 aWZfanBlZy5jCTIwMDUtMDYtMDYgMTE6MzY6NTcuMDAwMDAwMDAwICswMjAwCisrKyB0aWZmLTMu Ny40L2xpYnRpZmYvdGlmX2pwZWcuYwkyMDA2LTA1LTA5IDE5OjAwOjExLjkxNjAxODI1MCArMDIw MApAQCAtMTUwMCwxNSArMTUwMCwxOCBAQAogc3RhdGljIHZvaWQKIEpQRUdDbGVhbnVwKFRJRkYq IHRpZikKIHsKLQlpZiAodGlmLT50aWZfZGF0YSkgewogCQlKUEVHU3RhdGUgKnNwID0gSlN0YXRl KHRpZik7CisKKwkJYXNzZXJ0IChzcCAhPSAwKTsKKwkJdGlmLT50aWZfdGFnbWV0aG9kcy52Z2V0 ZmllbGQgPSBzcC0+dmdldHBhcmVudDsKKwkJdGlmLT50aWZfdGFnbWV0aG9kcy52c2V0ZmllbGQg PSBzcC0+dnNldHBhcmVudDsKKwogICAgICAgICAgICAgICAgIGlmKCBzcC0+Y2luZm9faW5pdGlh bGl6ZWQgKQogICAgICAgICAgICAgICAgICAgICBUSUZGanBlZ19kZXN0cm95KHNwKTsJLyogcmVs ZWFzZSBsaWJqcGVnIHJlc291cmNlcyAqLwogCQlpZiAoc3AtPmpwZWd0YWJsZXMpCQkvKiB0YWcg dmFsdWUgKi8KIAkJCV9USUZGZnJlZShzcC0+anBlZ3RhYmxlcyk7CiAJCV9USUZGZnJlZSh0aWYt PnRpZl9kYXRhKTsJLyogcmVsZWFzZSBsb2NhbCBzdGF0ZSAqLwogCQl0aWYtPnRpZl9kYXRhID0g TlVMTDsKLQl9CiB9CiAKIHN0YXRpYyBpbnQKZGlmZiAtdU5yIC1yIHRpZmYtMy43LjQtb3JpZy9s aWJ0aWZmL3RpZl9sencuYyB0aWZmLTMuNy40L2xpYnRpZmYvdGlmX2x6dy5jCi0tLSB0aWZmLTMu Ny40LW9yaWcvbGlidGlmZi90aWZfbHp3LmMJMjAwNC0xMC0wMiAxNTo1MjoyOS4wMDAwMDAwMDAg KzAyMDAKKysrIHRpZmYtMy43LjQvbGlidGlmZi90aWZfbHp3LmMJMjAwNi0wNS0wOSAxOTowMDox MS45MTYwMTgyNTAgKzAyMDAKQEAgLTEwMDIsNiArMTAwMiw4IEBACiBzdGF0aWMgdm9pZAogTFpX Q2xlYW51cChUSUZGKiB0aWYpCiB7CisJKHZvaWQpVElGRlByZWRpY3RvckNsZWFudXAodGlmKTsK KwogCWlmICh0aWYtPnRpZl9kYXRhKSB7CiAJCWlmIChEZWNvZGVyU3RhdGUodGlmKS0+ZGVjX2Nv ZGV0YWIpCiAJCQlfVElGRmZyZWUoRGVjb2RlclN0YXRlKHRpZiktPmRlY19jb2RldGFiKTsKZGlm ZiAtdU5yIC1yIHRpZmYtMy43LjQtb3JpZy9saWJ0aWZmL3RpZl9waXhhcmxvZy5jIHRpZmYtMy43 LjQvbGlidGlmZi90aWZfcGl4YXJsb2cuYwotLS0gdGlmZi0zLjcuNC1vcmlnL2xpYnRpZmYvdGlm X3BpeGFybG9nLmMJMjAwNS0wMS0xNSAxODoyMDo1OC4wMDAwMDAwMDAgKzAxMDAKKysrIHRpZmYt My43LjQvbGlidGlmZi90aWZfcGl4YXJsb2cuYwkyMDA2LTA1LTA5IDE5OjAwOjExLjkxNjAxODI1 MCArMDIwMApAQCAtMTE2Myw3ICsxMTYzLDEzIEBACiB7CiAJUGl4YXJMb2dTdGF0ZSogc3AgPSAo UGl4YXJMb2dTdGF0ZSopIHRpZi0+dGlmX2RhdGE7CiAKLQlpZiAoc3ApIHsKKwlhc3NlcnQoc3Ag IT0gMCk7CisJCisJKHZvaWQpVElGRlByZWRpY3RvckNsZWFudXAodGlmKTsKKworCXRpZi0+dGlm X3RhZ21ldGhvZHMudmdldGZpZWxkID0gc3AtPnZnZXRwYXJlbnQ7CisJdGlmLT50aWZfdGFnbWV0 aG9kcy52c2V0ZmllbGQgPSBzcC0+dnNldHBhcmVudDsKKwogCQlpZiAoc3AtPkZyb21MVDIpIF9U SUZGZnJlZShzcC0+RnJvbUxUMik7CiAJCWlmIChzcC0+RnJvbTE0KSBfVElGRmZyZWUoc3AtPkZy b20xNCk7CiAJCWlmIChzcC0+RnJvbTgpIF9USUZGZnJlZShzcC0+RnJvbTgpOwpAQCAtMTE4MCw3 ICsxMTg2LDYgQEAKIAkJCV9USUZGZnJlZShzcC0+dGJ1Zik7CiAJCV9USUZGZnJlZShzcCk7CiAJ CXRpZi0+dGlmX2RhdGEgPSBOVUxMOwotCX0KIH0KIAogc3RhdGljIGludApkaWZmIC11TnIgLXIg dGlmZi0zLjcuNC1vcmlnL2xpYnRpZmYvdGlmX3ByZWRpY3QuYyB0aWZmLTMuNy40L2xpYnRpZmYv dGlmX3ByZWRpY3QuYwotLS0gdGlmZi0zLjcuNC1vcmlnL2xpYnRpZmYvdGlmX3ByZWRpY3QuYwky MDA1LTA2LTA2IDExOjM2OjU5LjAwMDAwMDAwMCArMDIwMAorKysgdGlmZi0zLjcuNC9saWJ0aWZm L3RpZl9wcmVkaWN0LmMJMjAwNi0wNS0wOSAxOTowMDoxMS45MTYwMTgyNTAgKzAyMDAKQEAgLTUx OSw2ICs1MTksOSBAQAogewogCVRJRkZQcmVkaWN0b3JTdGF0ZSAqc3AgPSBQcmVkaWN0b3JTdGF0 ZSh0aWYpOwogCisJYXNzZXJ0KHNwICE9IE5VTEwpOworCWFzc2VydChzcC0+dnNldHBhcmVudCAh PSBOVUxMKTsKKyAKIAlzd2l0Y2ggKHRhZykgewogCWNhc2UgVElGRlRBR19QUkVESUNUT1I6CiAJ CXNwLT5wcmVkaWN0b3IgPSAodWludDE2KSB2YV9hcmcoYXAsIGludCk7CkBAIC01MzYsNiArNTM5 LDkgQEAKIHsKIAlUSUZGUHJlZGljdG9yU3RhdGUgKnNwID0gUHJlZGljdG9yU3RhdGUodGlmKTsK IAorCWFzc2VydChzcCAhPSBOVUxMKTsKKwlhc3NlcnQoc3AtPnZnZXRwYXJlbnQgIT0gTlVMTCk7 CisKIAlzd2l0Y2ggKHRhZykgewogCWNhc2UgVElGRlRBR19QUkVESUNUT1I6CiAJCSp2YV9hcmco YXAsIHVpbnQxNiopID0gc3AtPnByZWRpY3RvcjsKQEAgLTU2OSw2ICs1NzUsOCBAQAogVElGRlBy ZWRpY3RvckluaXQoVElGRiogdGlmKQogewogCVRJRkZQcmVkaWN0b3JTdGF0ZSogc3AgPSBQcmVk aWN0b3JTdGF0ZSh0aWYpOworCQorCWFzc2VydChzcCAhPSBOVUxMKTsKIAogCS8qCiAJICogTWVy Z2UgY29kZWMtc3BlY2lmaWMgdGFnIGluZm9ybWF0aW9uIGFuZApAQCAtNTk1LDQgKzYwMywyMCBA QAogCXJldHVybiAxOwogfQogCitpbnQKK1RJRkZQcmVkaWN0b3JDbGVhbnVwKFRJRkYqIHRpZikK K3sKKwlUSUZGUHJlZGljdG9yU3RhdGUqIHNwID0gUHJlZGljdG9yU3RhdGUodGlmKTsKKworCWFz c2VydChzcCAhPSAwKTsKKworCXRpZi0+dGlmX3RhZ21ldGhvZHMudmdldGZpZWxkID0gc3AtPnZn ZXRwYXJlbnQ7CisJdGlmLT50aWZfdGFnbWV0aG9kcy52c2V0ZmllbGQgPSBzcC0+dnNldHBhcmVu dDsKKwl0aWYtPnRpZl90YWdtZXRob2RzLnByaW50ZGlyID0gc3AtPnByaW50ZGlyOworCXRpZi0+ dGlmX3NldHVwZGVjb2RlID0gc3AtPnNldHVwZGVjb2RlOworCXRpZi0+dGlmX3NldHVwZW5jb2Rl ID0gc3AtPnNldHVwZW5jb2RlOworCisJcmV0dXJuIDE7Cit9CisKIC8qIHZpbTogc2V0IHRzPTgg c3RzPTggc3c9OCBub2V0OiAqLwpkaWZmIC11TnIgLXIgdGlmZi0zLjcuNC1vcmlnL2xpYnRpZmYv dGlmX3ByZWRpY3QuaCB0aWZmLTMuNy40L2xpYnRpZmYvdGlmX3ByZWRpY3QuaAotLS0gdGlmZi0z LjcuNC1vcmlnL2xpYnRpZmYvdGlmX3ByZWRpY3QuaAkyMDA1LTA0LTE1IDE5OjEzOjM0LjAwMDAw MDAwMCArMDIwMAorKysgdGlmZi0zLjcuNC9saWJ0aWZmL3RpZl9wcmVkaWN0LmgJMjAwNi0wNS0w OSAxOTowMDoxMS45MTYwMTgyNTAgKzAyMDAKQEAgLTU1LDYgKzU1LDcgQEAKIGV4dGVybiAiQyIg ewogI2VuZGlmCiBleHRlcm4JaW50IFRJRkZQcmVkaWN0b3JJbml0KFRJRkYqKTsKK2V4dGVybglp bnQgVElGRlByZWRpY3RvckNsZWFudXAoVElGRiopOwogI2lmIGRlZmluZWQoX19jcGx1c3BsdXMp CiB9CiAjZW5kaWYKZGlmZiAtdU5yIC1yIHRpZmYtMy43LjQtb3JpZy9saWJ0aWZmL3RpZl96aXAu YyB0aWZmLTMuNy40L2xpYnRpZmYvdGlmX3ppcC5jCi0tLSB0aWZmLTMuNy40LW9yaWcvbGlidGlm Zi90aWZfemlwLmMJMjAwNC0xMC0wMiAxNTo1MjoyOS4wMDAwMDAwMDAgKzAyMDAKKysrIHRpZmYt My43LjQvbGlidGlmZi90aWZfemlwLmMJMjAwNi0wNS0wOSAxOTowMDoxMS45MjAwMTg1MDAgKzAy MDAKQEAgLTI0OSw3ICsyNDksMTQgQEAKIFpJUENsZWFudXAoVElGRiogdGlmKQogewogCVpJUFN0 YXRlKiBzcCA9IFpTdGF0ZSh0aWYpOwotCWlmIChzcCkgeworCisJYXNzZXJ0KHNwICE9IDApOwor CisJKHZvaWQpVElGRlByZWRpY3RvckNsZWFudXAodGlmKTsKKworCXRpZi0+dGlmX3RhZ21ldGhv ZHMudmdldGZpZWxkID0gc3AtPnZnZXRwYXJlbnQ7CisJdGlmLT50aWZfdGFnbWV0aG9kcy52c2V0 ZmllbGQgPSBzcC0+dnNldHBhcmVudDsKKwogCQlpZiAoc3AtPnN0YXRlJlpTVEFURV9JTklUKSB7 CiAJCQkvKiBOQjogYXZvaWQgcHJvYmxlbXMgaW4gdGhlIGxpYnJhcnkgKi8KIAkJCWlmICh0aWYt PnRpZl9tb2RlID09IE9fUkRPTkxZKQpAQCAtMjU5LDcgKzI2Niw2IEBACiAJCX0KIAkJX1RJRkZm cmVlKHNwKTsKIAkJdGlmLT50aWZfZGF0YSA9IE5VTEw7Ci0JfQogfQogCiBzdGF0aWMgaW50Cg== 86492 2006-05-09 10:15 0000 patch 3.7.3 (not verified) tiff-3.7.3-bug129675.patch text/plain ZGlmZiAtdU5yIC1yIHRpZmYtMy43LjMtb3JpZy9saWJ0aWZmL3RpZl9jb2xvci5jIHRpZmYtMy43 LjMvbGlidGlmZi90aWZfY29sb3IuYwotLS0gdGlmZi0zLjcuMy1vcmlnL2xpYnRpZmYvdGlmX2Nv bG9yLmMJMjAwNS0wNy0wNSAxODozODowOC4wMDAwMDAwMDAgKzAyMDAKKysrIHRpZmYtMy43LjMv bGlidGlmZi90aWZfY29sb3IuYwkyMDA2LTA1LTA5IDE5OjE2OjA4Ljc5OTgxOTc1MCArMDIwMApA QCAtOTIsNiArOTIsMTEgQEAKIAlZZyA9IFRJRkZtYXgoWWcsIGNpZWxhYi0+ZGlzcGxheS5kX1kw Ryk7CiAJWWIgPSBUSUZGbWF4KFliLCBjaWVsYWItPmRpc3BsYXkuZF9ZMEIpOwogCisJLyogQXZv aWQgb3ZlcmZsb3cgaW4gY2FzZSBvZiB3cm9uZyBpbnB1dCB2YWx1ZXMgKi8KKwlZciA9IFRJRkZt aW4oWXIsIGNpZWxhYi0+ZGlzcGxheS5kX1lDUik7CisJWWcgPSBUSUZGbWluKFlnLCBjaWVsYWIt PmRpc3BsYXkuZF9ZQ0cpOworCVliID0gVElGRm1pbihZYiwgY2llbGFiLT5kaXNwbGF5LmRfWUNC KTsKKwogCS8qIFR1cm4gbHVtaW5vc2l0eSB0byBjb2xvdXIgdmFsdWUuICovCiAJaSA9IChpbnQp KChZciAtIGNpZWxhYi0+ZGlzcGxheS5kX1kwUikgLyBjaWVsYWItPnJzdGVwKTsKIAlpID0gVElG Rm1pbihjaWVsYWItPnJhbmdlLCBpKTsKZGlmZiAtdU5yIC1yIHRpZmYtMy43LjMtb3JpZy9saWJ0 aWZmL3RpZl9kaXJyZWFkLmMgdGlmZi0zLjcuMy9saWJ0aWZmL3RpZl9kaXJyZWFkLmMKLS0tIHRp ZmYtMy43LjMtb3JpZy9saWJ0aWZmL3RpZl9kaXJyZWFkLmMJMjAwNS0wNS0yNCAyMDo1NToyMC4w MDAwMDAwMDAgKzAyMDAKKysrIHRpZmYtMy43LjMvbGlidGlmZi90aWZfZGlycmVhZC5jCTIwMDYt MDUtMDkgMTk6MTY6MDguNzk5ODE5NzUwICswMjAwCkBAIC03OTgsMTMgKzc5OCwyMCBAQAogCWlu dCB3ID0gVElGRkRhdGFXaWR0aCgoVElGRkRhdGFUeXBlKSBkaXItPnRkaXJfdHlwZSk7CiAJdHNp emVfdCBjYyA9IGRpci0+dGRpcl9jb3VudCAqIHc7CiAKKwkvKiBDaGVjayBmb3Igb3ZlcmZsb3cu ICovCisJaWYgKCFkaXItPnRkaXJfY291bnQgfHwgIXcgfHwgY2MgLyB3ICE9ICh0c2l6ZV90KWRp ci0+dGRpcl9jb3VudCkKKwkJZ290byBiYWQ7CisKIAlpZiAoIWlzTWFwcGVkKHRpZikpIHsKIAkJ aWYgKCFTZWVrT0sodGlmLCBkaXItPnRkaXJfb2Zmc2V0KSkKIAkJCWdvdG8gYmFkOwogCQlpZiAo IVJlYWRPSyh0aWYsIGNwLCBjYykpCiAJCQlnb3RvIGJhZDsKIAl9IGVsc2UgewotCQlpZiAoZGly LT50ZGlyX29mZnNldCArIGNjID4gdGlmLT50aWZfc2l6ZSkKKwkJLyogQ2hlY2sgZm9yIG92ZXJm bG93LiAqLworCQlpZiAoKHRzaXplX3QpZGlyLT50ZGlyX29mZnNldCArIGNjIDwgKHRzaXplX3Qp ZGlyLT50ZGlyX29mZnNldAorCQkgICAgfHwgKHRzaXplX3QpZGlyLT50ZGlyX29mZnNldCArIGNj IDwgY2MKKwkJICAgIHx8ICh0c2l6ZV90KWRpci0+dGRpcl9vZmZzZXQgKyBjYyA+ICh0c2l6ZV90 KXRpZi0+dGlmX3NpemUpCiAJCQlnb3RvIGJhZDsKIAkJX1RJRkZtZW1jcHkoY3AsIHRpZi0+dGlm X2Jhc2UgKyBkaXItPnRkaXJfb2Zmc2V0LCBjYyk7CiAJfQpkaWZmIC11TnIgLXIgdGlmZi0zLjcu My1vcmlnL2xpYnRpZmYvdGlmX2ZheDMuYyB0aWZmLTMuNy4zL2xpYnRpZmYvdGlmX2ZheDMuYwot LS0gdGlmZi0zLjcuMy1vcmlnL2xpYnRpZmYvdGlmX2ZheDMuYwkyMDA1LTAzLTA2IDExOjUxOjM2 LjAwMDAwMDAwMCArMDEwMAorKysgdGlmZi0zLjcuMy9saWJ0aWZmL3RpZl9mYXgzLmMJMjAwNi0w NS0wOSAxOToxNjowOC43OTk4MTk3NTAgKzAyMDAKQEAgLTEwNzQsNiArMTA3NCwxMCBAQAogCWlm ICh0aWYtPnRpZl9kYXRhKSB7CiAJCUZheDNDb2RlY1N0YXRlKiBzcCA9IERlY29kZXJTdGF0ZSh0 aWYpOwogCisJCWFzc2VydCAoc3AgIT0gMCk7CisJCXRpZi0+dGlmX3RhZ21ldGhvZHMudmdldGZp ZWxkID0gc3AtPmIudmdldHBhcmVudDsKKwkJdGlmLT50aWZfdGFnbWV0aG9kcy52c2V0ZmllbGQg PSBzcC0+Yi52c2V0cGFyZW50OworCiAJCWlmIChzcC0+cnVucykKIAkJCV9USUZGZnJlZShzcC0+ cnVucyk7CiAJCWlmIChzcC0+cmVmbGluZSkKQEAgLTExMzQsNiArMTEzOCw4IEBACiBGYXgzVlNl dEZpZWxkKFRJRkYqIHRpZiwgdHRhZ190IHRhZywgdmFfbGlzdCBhcCkKIHsKIAlGYXgzQmFzZVN0 YXRlKiBzcCA9IEZheDNTdGF0ZSh0aWYpOworCWFzc2VydCAoc3AgIT0gMCk7CisJYXNzZXJ0IChz cC0+dnNldHBhcmVudCAhPSAwKTsKIAogCXN3aXRjaCAodGFnKSB7CiAJY2FzZSBUSUZGVEFHX0ZB WE1PREU6CmRpZmYgLXVOciAtciB0aWZmLTMuNy4zLW9yaWcvbGlidGlmZi90aWZfanBlZy5jIHRp ZmYtMy43LjMvbGlidGlmZi90aWZfanBlZy5jCi0tLSB0aWZmLTMuNy4zLW9yaWcvbGlidGlmZi90 aWZfanBlZy5jCTIwMDUtMDYtMDEgMTk6MTU6MTQuMDAwMDAwMDAwICswMjAwCisrKyB0aWZmLTMu Ny4zL2xpYnRpZmYvdGlmX2pwZWcuYwkyMDA2LTA1LTA5IDE5OjE2OjA4Ljc5OTgxOTc1MCArMDIw MApAQCAtMTUwMCwxNSArMTUwMCwxOCBAQAogc3RhdGljIHZvaWQKIEpQRUdDbGVhbnVwKFRJRkYq IHRpZikKIHsKLQlpZiAodGlmLT50aWZfZGF0YSkgewogCQlKUEVHU3RhdGUgKnNwID0gSlN0YXRl KHRpZik7CisKKwkJYXNzZXJ0IChzcCAhPSAwKTsKKwkJdGlmLT50aWZfdGFnbWV0aG9kcy52Z2V0 ZmllbGQgPSBzcC0+dmdldHBhcmVudDsKKwkJdGlmLT50aWZfdGFnbWV0aG9kcy52c2V0ZmllbGQg PSBzcC0+dnNldHBhcmVudDsKKwogICAgICAgICAgICAgICAgIGlmKCBzcC0+Y2luZm9faW5pdGlh bGl6ZWQgKQogICAgICAgICAgICAgICAgICAgICBUSUZGanBlZ19kZXN0cm95KHNwKTsJLyogcmVs ZWFzZSBsaWJqcGVnIHJlc291cmNlcyAqLwogCQlpZiAoc3AtPmpwZWd0YWJsZXMpCQkvKiB0YWcg dmFsdWUgKi8KIAkJCV9USUZGZnJlZShzcC0+anBlZ3RhYmxlcyk7CiAJCV9USUZGZnJlZSh0aWYt PnRpZl9kYXRhKTsJLyogcmVsZWFzZSBsb2NhbCBzdGF0ZSAqLwogCQl0aWYtPnRpZl9kYXRhID0g TlVMTDsKLQl9CiB9CiAKIHN0YXRpYyBpbnQKZGlmZiAtdU5yIC1yIHRpZmYtMy43LjMtb3JpZy9s aWJ0aWZmL3RpZl9sencuYyB0aWZmLTMuNy4zL2xpYnRpZmYvdGlmX2x6dy5jCi0tLSB0aWZmLTMu Ny4zLW9yaWcvbGlidGlmZi90aWZfbHp3LmMJMjAwNC0xMC0wMiAxNTo1MjoyOS4wMDAwMDAwMDAg KzAyMDAKKysrIHRpZmYtMy43LjMvbGlidGlmZi90aWZfbHp3LmMJMjAwNi0wNS0wOSAxOToxNjow OC43OTk4MTk3NTAgKzAyMDAKQEAgLTEwMDIsNiArMTAwMiw4IEBACiBzdGF0aWMgdm9pZAogTFpX Q2xlYW51cChUSUZGKiB0aWYpCiB7CisJKHZvaWQpVElGRlByZWRpY3RvckNsZWFudXAodGlmKTsK KwogCWlmICh0aWYtPnRpZl9kYXRhKSB7CiAJCWlmIChEZWNvZGVyU3RhdGUodGlmKS0+ZGVjX2Nv ZGV0YWIpCiAJCQlfVElGRmZyZWUoRGVjb2RlclN0YXRlKHRpZiktPmRlY19jb2RldGFiKTsKZGlm ZiAtdU5yIC1yIHRpZmYtMy43LjMtb3JpZy9saWJ0aWZmL3RpZl9waXhhcmxvZy5jIHRpZmYtMy43 LjMvbGlidGlmZi90aWZfcGl4YXJsb2cuYwotLS0gdGlmZi0zLjcuMy1vcmlnL2xpYnRpZmYvdGlm X3BpeGFybG9nLmMJMjAwNS0wMS0xNSAxODoyMDo1OC4wMDAwMDAwMDAgKzAxMDAKKysrIHRpZmYt My43LjMvbGlidGlmZi90aWZfcGl4YXJsb2cuYwkyMDA2LTA1LTA5IDE5OjE2OjA4LjgwMzgyMDAw MCArMDIwMApAQCAtMTE2Myw3ICsxMTYzLDEzIEBACiB7CiAJUGl4YXJMb2dTdGF0ZSogc3AgPSAo UGl4YXJMb2dTdGF0ZSopIHRpZi0+dGlmX2RhdGE7CiAKLQlpZiAoc3ApIHsKKwlhc3NlcnQoc3Ag IT0gMCk7CisJCisJKHZvaWQpVElGRlByZWRpY3RvckNsZWFudXAodGlmKTsKKworCXRpZi0+dGlm X3RhZ21ldGhvZHMudmdldGZpZWxkID0gc3AtPnZnZXRwYXJlbnQ7CisJdGlmLT50aWZfdGFnbWV0 aG9kcy52c2V0ZmllbGQgPSBzcC0+dnNldHBhcmVudDsKKwogCQlpZiAoc3AtPkZyb21MVDIpIF9U SUZGZnJlZShzcC0+RnJvbUxUMik7CiAJCWlmIChzcC0+RnJvbTE0KSBfVElGRmZyZWUoc3AtPkZy b20xNCk7CiAJCWlmIChzcC0+RnJvbTgpIF9USUZGZnJlZShzcC0+RnJvbTgpOwpAQCAtMTE4MCw3 ICsxMTg2LDYgQEAKIAkJCV9USUZGZnJlZShzcC0+dGJ1Zik7CiAJCV9USUZGZnJlZShzcCk7CiAJ CXRpZi0+dGlmX2RhdGEgPSBOVUxMOwotCX0KIH0KIAogc3RhdGljIGludApkaWZmIC11TnIgLXIg dGlmZi0zLjcuMy1vcmlnL2xpYnRpZmYvdGlmX3ByZWRpY3QuYyB0aWZmLTMuNy4zL2xpYnRpZmYv dGlmX3ByZWRpY3QuYwotLS0gdGlmZi0zLjcuMy1vcmlnL2xpYnRpZmYvdGlmX3ByZWRpY3QuYwky MDA1LTA2LTA1IDE4OjEzOjE1LjAwMDAwMDAwMCArMDIwMAorKysgdGlmZi0zLjcuMy9saWJ0aWZm L3RpZl9wcmVkaWN0LmMJMjAwNi0wNS0wOSAxOToxNjowOC44MDM4MjAwMDAgKzAyMDAKQEAgLTUx OSw2ICs1MTksOSBAQAogewogCVRJRkZQcmVkaWN0b3JTdGF0ZSAqc3AgPSBQcmVkaWN0b3JTdGF0 ZSh0aWYpOwogCisJYXNzZXJ0KHNwICE9IE5VTEwpOworCWFzc2VydChzcC0+dnNldHBhcmVudCAh PSBOVUxMKTsKKyAKIAlzd2l0Y2ggKHRhZykgewogCWNhc2UgVElGRlRBR19QUkVESUNUT1I6CiAJ CXNwLT5wcmVkaWN0b3IgPSAodWludDE2KSB2YV9hcmcoYXAsIGludCk7CkBAIC01MzYsNiArNTM5 LDkgQEAKIHsKIAlUSUZGUHJlZGljdG9yU3RhdGUgKnNwID0gUHJlZGljdG9yU3RhdGUodGlmKTsK IAorCWFzc2VydChzcCAhPSBOVUxMKTsKKwlhc3NlcnQoc3AtPnZnZXRwYXJlbnQgIT0gTlVMTCk7 CisKIAlzd2l0Y2ggKHRhZykgewogCWNhc2UgVElGRlRBR19QUkVESUNUT1I6CiAJCSp2YV9hcmco YXAsIHVpbnQxNiopID0gc3AtPnByZWRpY3RvcjsKQEAgLTU2OSw2ICs1NzUsOCBAQAogVElGRlBy ZWRpY3RvckluaXQoVElGRiogdGlmKQogewogCVRJRkZQcmVkaWN0b3JTdGF0ZSogc3AgPSBQcmVk aWN0b3JTdGF0ZSh0aWYpOworCQorCWFzc2VydChzcCAhPSBOVUxMKTsKIAogCS8qCiAJICogTWVy Z2UgY29kZWMtc3BlY2lmaWMgdGFnIGluZm9ybWF0aW9uIGFuZApAQCAtNTk1LDQgKzYwMywyMCBA QAogCXJldHVybiAxOwogfQogCitpbnQKK1RJRkZQcmVkaWN0b3JDbGVhbnVwKFRJRkYqIHRpZikK K3sKKwlUSUZGUHJlZGljdG9yU3RhdGUqIHNwID0gUHJlZGljdG9yU3RhdGUodGlmKTsKKworCWFz c2VydChzcCAhPSAwKTsKKworCXRpZi0+dGlmX3RhZ21ldGhvZHMudmdldGZpZWxkID0gc3AtPnZn ZXRwYXJlbnQ7CisJdGlmLT50aWZfdGFnbWV0aG9kcy52c2V0ZmllbGQgPSBzcC0+dnNldHBhcmVu dDsKKwl0aWYtPnRpZl90YWdtZXRob2RzLnByaW50ZGlyID0gc3AtPnByaW50ZGlyOworCXRpZi0+ dGlmX3NldHVwZGVjb2RlID0gc3AtPnNldHVwZGVjb2RlOworCXRpZi0+dGlmX3NldHVwZW5jb2Rl ID0gc3AtPnNldHVwZW5jb2RlOworCisJcmV0dXJuIDE7Cit9CisKIC8qIHZpbTogc2V0IHRzPTgg c3RzPTggc3c9OCBub2V0OiAqLwpkaWZmIC11TnIgLXIgdGlmZi0zLjcuMy1vcmlnL2xpYnRpZmYv dGlmX3ByZWRpY3QuaCB0aWZmLTMuNy4zL2xpYnRpZmYvdGlmX3ByZWRpY3QuaAotLS0gdGlmZi0z LjcuMy1vcmlnL2xpYnRpZmYvdGlmX3ByZWRpY3QuaAkyMDA1LTA0LTE1IDE5OjEzOjM0LjAwMDAw MDAwMCArMDIwMAorKysgdGlmZi0zLjcuMy9saWJ0aWZmL3RpZl9wcmVkaWN0LmgJMjAwNi0wNS0w OSAxOToxNjowOC44MDM4MjAwMDAgKzAyMDAKQEAgLTU1LDYgKzU1LDcgQEAKIGV4dGVybiAiQyIg ewogI2VuZGlmCiBleHRlcm4JaW50IFRJRkZQcmVkaWN0b3JJbml0KFRJRkYqKTsKK2V4dGVybglp bnQgVElGRlByZWRpY3RvckNsZWFudXAoVElGRiopOwogI2lmIGRlZmluZWQoX19jcGx1c3BsdXMp CiB9CiAjZW5kaWYKZGlmZiAtdU5yIC1yIHRpZmYtMy43LjMtb3JpZy9saWJ0aWZmL3RpZl96aXAu YyB0aWZmLTMuNy4zL2xpYnRpZmYvdGlmX3ppcC5jCi0tLSB0aWZmLTMuNy4zLW9yaWcvbGlidGlm Zi90aWZfemlwLmMJMjAwNC0xMC0wMiAxNTo1MjoyOS4wMDAwMDAwMDAgKzAyMDAKKysrIHRpZmYt My43LjMvbGlidGlmZi90aWZfemlwLmMJMjAwNi0wNS0wOSAxOToxNjowOC44MDM4MjAwMDAgKzAy MDAKQEAgLTI0OSw3ICsyNDksMTQgQEAKIFpJUENsZWFudXAoVElGRiogdGlmKQogewogCVpJUFN0 YXRlKiBzcCA9IFpTdGF0ZSh0aWYpOwotCWlmIChzcCkgeworCisJYXNzZXJ0KHNwICE9IDApOwor CisJKHZvaWQpVElGRlByZWRpY3RvckNsZWFudXAodGlmKTsKKworCXRpZi0+dGlmX3RhZ21ldGhv ZHMudmdldGZpZWxkID0gc3AtPnZnZXRwYXJlbnQ7CisJdGlmLT50aWZfdGFnbWV0aG9kcy52c2V0 ZmllbGQgPSBzcC0+dnNldHBhcmVudDsKKwogCQlpZiAoc3AtPnN0YXRlJlpTVEFURV9JTklUKSB7 CiAJCQkvKiBOQjogYXZvaWQgcHJvYmxlbXMgaW4gdGhlIGxpYnJhcnkgKi8KIAkJCWlmICh0aWYt PnRpZl9tb2RlID09IE9fUkRPTkxZKQpAQCAtMjU5LDcgKzI2Niw2IEBACiAJCX0KIAkJX1RJRkZm cmVlKHNwKTsKIAkJdGlmLT50aWZfZGF0YSA9IE5VTEw7Ci0JfQogfQogCiBzdGF0aWMgaW50Cg==