From 94b50bd7a3cbdae173c84916f710d501a310c108 Mon Sep 17 00:00:00 2001 From: Marco Pesenti Gritti Date: Tue, 8 Mar 2005 10:46:40 +0000 Subject: [PATCH] Fix the patch s/ds/size --- libexif-0.5.12-buffer-overflow.patch | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libexif-0.5.12-buffer-overflow.patch b/libexif-0.5.12-buffer-overflow.patch index 078605f..7621c49 100644 --- a/libexif-0.5.12-buffer-overflow.patch +++ b/libexif-0.5.12-buffer-overflow.patch @@ -13,7 +13,7 @@ printf ("IFD 0 at %i.\n", (int) offset); #endif -+ if (ds < 6 + 4 + offset) ++ if (size < 6 + 4 + offset) + return; + /* Parse the actual exif data (offset 14) */ @@ -22,7 +22,7 @@ /* IFD 1 offset */ n = exif_get_short (d + 6 + offset, data->priv->order); -+ if (ds < 6 + offset + 2 + 12 * n + 4) ++ if (size < 6 + offset + 2 + 12 * n + 4) + return; + offset = exif_get_long (d + 6 + offset + 2 + 12 * n, data->priv->order);