diff options
| author | bfriesen <bfriesen> | 2015-05-28 02:19:16 +0000 |
|---|---|---|
| committer | bfriesen <bfriesen> | 2015-05-28 02:19:16 +0000 |
| commit | 0a0eef572fdb03321ef0b596295ba9c2673f6058 (patch) | |
| tree | 266aaa3f3808cde9359fd6c0e8742cdd0b02655e /tools | |
| parent | 335bc110f7c94ed1a2daec8d8a06e14524c3c5bd (diff) | |
| download | libtiff-0a0eef572fdb03321ef0b596295ba9c2673f6058.tar.gz | |
(loadImage): Fix Coverity 1299740 "Out-of-bounds write".
Diffstat (limited to 'tools')
| -rw-r--r-- | tools/tiffcrop.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/tools/tiffcrop.c b/tools/tiffcrop.c index a28f49d0..78b93a92 100644 --- a/tools/tiffcrop.c +++ b/tools/tiffcrop.c @@ -1,4 +1,4 @@ -/* $Id: tiffcrop.c,v 1.31 2015-05-28 02:16:08 bfriesen Exp $ */ +/* $Id: tiffcrop.c,v 1.32 2015-05-28 02:19:16 bfriesen Exp $ */ /* tiffcrop.c -- a port of tiffcp.c extended to include manipulations of * the image data through additional options listed below @@ -6013,7 +6013,7 @@ loadImage(TIFF* in, struct image_data *image, struct dump_opts *dump, unsigned c { if (prev_readsize < buffsize) { - new_buff = _TIFFrealloc(read_buff, buffsize); + new_buff = _TIFFrealloc(read_buff, buffsize+3); if (!new_buff) { free (read_buff); |