summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorbfriesen <bfriesen>2016-11-12 21:43:44 +0000
committerbfriesen <bfriesen>2016-11-12 21:43:44 +0000
commitc13e65d6d28147a401fd3dea8ef192844ccfc0f5 (patch)
tree9bd93cc3fee331285a68c88424848c0753ee820d
parent0f66b0034f0bac33b72ca446057c21130d99fa49 (diff)
downloadlibtiff-c13e65d6d28147a401fd3dea8ef192844ccfc0f5.tar.gz
Move mis-classified change note.
-rw-r--r--html/v4.0.7.html14
1 files changed, 7 insertions, 7 deletions
diff --git a/html/v4.0.7.html b/html/v4.0.7.html
index 76458051..8c426564 100644
--- a/html/v4.0.7.html
+++ b/html/v4.0.7.html
@@ -96,12 +96,6 @@ information is located here:
td_stripbytecount to be non NULL. Fixes
http://bugzilla.maptools.org/show_bug.cgi?id=2585
- <LI> tools/tiffcrop.c: fix multiple uint32 overflows in
- writeBufferToSeparateStrips(), writeBufferToContigTiles() and
- writeBufferToSeparateTiles() that could cause heap buffer
- overflows. Reported by Henri Salo from Nixu Corporation.
- Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2592
-
<LI> libtiff/tif_strip.c: make TIFFNumberOfStrips() return the
td->td_nstrips value when it is non-zero, instead of
recomputing it. This is needed in TIFF_STRIPCHOP mode where
@@ -309,6 +303,12 @@ information is located here:
<LI> tools/tiffinfo.c: fix out-of-bound read on some tiled images.
(http://bugzilla.maptools.org/show_bug.cgi?id=2517)
+ <LI> tools/tiffcrop.c: fix multiple uint32 overflows in
+ writeBufferToSeparateStrips(), writeBufferToContigTiles() and
+ writeBufferToSeparateTiles() that could cause heap buffer
+ overflows. Reported by Henri Salo from Nixu Corporation.
+ Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2592
+
<LI> tools/tiffcrop.c: fix out-of-bound read of up to 3 bytes in
readContigTilesIntoBuffer(). Reported as MSVR 35092 by Axel
Souchet & Vishal Chauhan from the MSRC Vulnerabilities &
@@ -393,7 +393,7 @@ information is located here:
</UL>
-Last updated $Date: 2016-11-12 18:30:47 $.
+Last updated $Date: 2016-11-12 21:43:44 $.
</BODY>
</HTML>