[cups.bugs] [MOD] STR #3914: cups: GIF reader loop, STR #3867 like

Tomas Hoger thoger at redhat.com
Thu Aug 4 23:58:41 PDT 2011


DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

Mike, I have found another way to trigger the condition that was described
in STR #3867.  The reason is a special handling of the first code in LZW
streams, somewhat related to STR #3869.  Few other implementations that do
not have stack overflow check in the while loop seem to handle this case by
checking the first code is < 256.

Test case attached.

Link: http://www.cups.org/str.php?L3914
Version: 1.4.8
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test.gif
Type: image/gif
Size: 37 bytes
Desc: not available
URL: <http://lists.cups.org/pipermail/cups-devel/attachments/20110804/ac2dfeeb/attachment.gif>


More information about the cups-devel mailing list