diff options
| author | giraffedata <giraffedata@9d0c8265-081b-0410-96cb-a4ca84ce46f8> | 2015-05-24 02:16:55 +0000 |
|---|---|---|
| committer | giraffedata <giraffedata@9d0c8265-081b-0410-96cb-a4ca84ce46f8> | 2015-05-24 02:16:55 +0000 |
| commit | cfbfa5c07438316b3df227dc01ab06e2e593694e (patch) | |
| tree | dc29f9b7495196c6d0335d784a8fde48b1313940 | |
| parent | 85c2c2cf450d92b4b875004bf46b777c3e653ec5 (diff) | |
| download | netpbm-mirror-cfbfa5c07438316b3df227dc01ab06e2e593694e.tar.gz netpbm-mirror-cfbfa5c07438316b3df227dc01ab06e2e593694e.tar.xz netpbm-mirror-cfbfa5c07438316b3df227dc01ab06e2e593694e.zip | |
Fix buffer overrun
git-svn-id: http://svn.code.sf.net/p/netpbm/code/trunk@2515 9d0c8265-081b-0410-96cb-a4ca84ce46f8
| -rw-r--r-- | converter/pbm/pbmtog3.c | 2 | ||||
| -rw-r--r-- | doc/HISTORY | 3 |
2 files changed, 4 insertions, 1 deletions
diff --git a/converter/pbm/pbmtog3.c b/converter/pbm/pbmtog3.c index 4e4ec0fd..f0fd1252 100644 --- a/converter/pbm/pbmtog3.c +++ b/converter/pbm/pbmtog3.c @@ -440,7 +440,7 @@ main(int argc, MALLOCARRAY_NOFAIL(bitrow, pbm_packed_bytes(cols) + sizeof(wordint)); - MALLOCARRAY_NOFAIL(milepost, readcols + 1); + MALLOCARRAY_NOFAIL(milepost, readcols + 2); initOutStream(cmdline.reversebits); puteol(); diff --git a/doc/HISTORY b/doc/HISTORY index d5375275..44e97390 100644 --- a/doc/HISTORY +++ b/doc/HISTORY @@ -16,6 +16,9 @@ not yet BJH Release 10.71.00 negative values (should be clipped to zero). Introduced in Netpbm 10.68 (September 2014). + pbmtog3: Fix buffer overrun. Introduced in Netpbm 10.23 + (July 2004). + cameratopam: Fix arithmetic underflow in JPEG processing; unknown effect. |