From 8a2f9160cc4c52c73a62adef4d9282b2bd6e7ff1 Mon Sep 17 00:00:00 2001 From: mancha Date: Mon, 19 Aug 2013 Subject: CVE-2013-4232 * tools/tiff2pdf.c: terminate after failure of allocating ycbcr buffer (bug #2449, CVE-2013-4232) --- tiff2pdf.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) --- a/tools/tiff2pdf.c 2013-08-20 +++ b/tools/tiff2pdf.c 2013-08-20 @@ -2457,7 +2457,8 @@ tsize_t t2p_readwrite_pdf_image(T2P* t2p t2p->tiff_datasize, TIFFFileName(input)); t2p->t2p_error = T2P_ERR_ERROR; - _TIFFfree(buffer); + _TIFFfree(buffer); + return(0); } else { buffer=samplebuffer; t2p->tiff_datasize *= t2p->tiff_samplesperpixel;