giflib: patch CVE-2025-3144 (#396919)

2025-05-28 11:42:09 +02:00
parent b34d5a4b16 ca159cd3b8
commit e075b4e6d8
2 changed files with 16 additions and 0 deletions
@@ -0,0 +1,15 @@
+diff -up giflib-5.2.2/gif2rgb.c.omv~ giflib-5.2.2/gif2rgb.c
+--- giflib-5.2.2/gif2rgb.c.omv~	2025-04-07 21:44:54.956355983 +0200
+++ giflib-5.2.2/gif2rgb.c	2025-04-07 21:45:29.630769589 +0200
+@@ -329,6 +329,11 @@ static void DumpScreen2RGB(char *FileNam
+ 			GifRow = ScreenBuffer[i];
+ 			GifQprintf("\b\b\b\b%-4d", ScreenHeight - i);
+ 			for (j = 0; j < ScreenWidth; j++) {
+				/* Check if color is within color palete */
+				if (GifRow[j] >= ColorMap->ColorCount) {
+					GIF_EXIT(GifErrorString(
+					    D_GIF_ERR_IMAGE_DEFECT));
+				}
+ 				ColorMapEntry = &ColorMap->Colors[GifRow[j]];
+ 				Buffers[0][j] = ColorMapEntry->Red;
+ 				Buffers[1][j] = ColorMapEntry->Green;
@@ -18,6 +18,7 @@ stdenv.mkDerivation rec {
  patches =
    [
      ./CVE-2021-40633.patch
+      ./CVE-2025-31344.patch
    ]
    ++ lib.optionals stdenv.hostPlatform.isMinGW [
      # Build dll libraries.