[patch] libexif-CVE-2007-6352.patch

libexif-CVE-2007-6352.patch (text/plain), 691 bytes, created by Robert Buchholz (RETIRED) on 2007-12-15 00:23:25 UTC

Index: libexif-0.6.16/libexif/exif-data.c
===================================================================
--- libexif-0.6.16.orig/libexif/exif-data.c
+++ libexif-0.6.16/libexif/exif-data.c
@@ -288,10 +288,9 @@ static void
 exif_data_load_data_thumbnail (ExifData *data, const unsigned char *d,
 			       unsigned int ds, ExifLong offset, ExifLong size)
 {
-	if (ds < offset + size) {
+	if ((ds < offset + size) || (offset < 0) || (offset > ds)) {
 		exif_log (data->priv->log, EXIF_LOG_CODE_DEBUG, "ExifData",
-			  "Bogus thumbnail offset and size: %i < %i + %i.",
-			  (int) ds, (int) offset, (int) size);
+			  "Bogus thumbnail offset and size.");
 		return;
 	}
 	if (data->data)