Files
packages/libs/giflib/patches/200-verify-color-in-range.patch
Ted Hess 6a8152811e giflib: Add Gentoo patch to fix various CVEs
Fixes:
    CVE-2022-28506
    CVE-2023-48161
    CVE-2024-45993
    CVE-2025-31344

Remove myself as maintainer

Signed-off-by: Ted Hess <thess@kitschensync.net>
2025-09-28 09:38:20 +03:00

14 lines
507 B
Diff

--- a/gif2rgb.c
+++ b/gif2rgb.c
@@ -329,6 +329,10 @@ static void DumpScreen2RGB(char *FileNam
GifRow = ScreenBuffer[i];
GifQprintf("\b\b\b\b%-4d", ScreenHeight - i);
for (j = 0; j < ScreenWidth; j++) {
+ /* Check if color is within color palete */
+ if (GifRow[j] >= ColorMap->ColorCount) {
+ GIF_EXIT(GifErrorString(D_GIF_ERR_IMAGE_DEFECT));
+ }
ColorMapEntry = &ColorMap->Colors[GifRow[j]];
Buffers[0][j] = ColorMapEntry->Red;
Buffers[1][j] = ColorMapEntry->Green;