mirrors/aports
1
0
Fork 0
mirror of https://gitlab.alpinelinux.org/alpine/aports.git synced 2026-05-05 20:36:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

main/sdl2_image: security fix for CVE-2019-13616.

Browse Source 
Fixes #10879
This commit is contained in:
Francesco Colista 2019-10-21 20:28:57 +00:00
parent 5f0866d558
commit af11b34626
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
main/sdl2_image/CVE-2019-13616.patch Normal file
View File

@ -0,0 +1,24 @@
# HG changeset patch
# User Sam Lantinga <slouken@libsdl.org>
# Date 1564509612 25200
# Node ID ba45f00879ba0b957780e1fd28304c41503c1737
# Parent f1baffa48926c4c76f482f21a240667e9159d1d5
Fixed bug 4538 - validate image size when loading BMP files
diff -r f1baffa48926 -r ba45f00879ba IMG_bmp.c
--- a/IMG_bmp.c Tue Jul 30 10:16:02 2019 -0700
+++ b/IMG_bmp.c Tue Jul 30 11:00:12 2019 -0700
@@ -351,6 +351,11 @@
SDL_RWseek(src, (biSize - headerSize), RW_SEEK_CUR);
}
}
+ if (biWidth <= 0 || biHeight == 0) {
+ IMG_SetError("BMP file with bad dimensions (%dx%d)", biWidth, biHeight);
+ was_error = SDL_TRUE;
+ goto done;
+ }
if (biHeight < 0) {
topDown = SDL_TRUE;
biHeight = -biHeight;