mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-09-29 22:47:29 +00:00
a682f5efd0
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32659 Pick the commit that mentioned in the above CVE report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
28 lines
898 B
Diff
28 lines
898 B
Diff
From 47d18566159cefd714187e9b143a6ecbd1b13781 Mon Sep 17 00:00:00 2001
|
|
From: akallabeth <akallabeth@posteo.net>
|
|
Date: Sun, 21 Apr 2024 10:18:43 +0200
|
|
Subject: [PATCH] fix out of bound read
|
|
|
|
CVE: CVE-2024-32659
|
|
Upstream-Status: Backport [https://github.com/FreeRDP/FreeRDP/commit/6430945ce003a5e24d454d8566f54aae1b6b617b]
|
|
|
|
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
|
|
---
|
|
libfreerdp/codec/color.c | 3 +++
|
|
1 file changed, 3 insertions(+)
|
|
|
|
diff --git a/libfreerdp/codec/color.c b/libfreerdp/codec/color.c
|
|
index 186d477c8..9aba6df65 100644
|
|
--- a/libfreerdp/codec/color.c
|
|
+++ b/libfreerdp/codec/color.c
|
|
@@ -847,6 +847,9 @@ BOOL freerdp_image_copy(BYTE* pDstData, DWORD DstFormat, UINT32 nDstStep, UINT32
|
|
if (!pDstData || !pSrcData)
|
|
return FALSE;
|
|
|
|
+ if ((nWidth == 0) || (nHeight == 0))
|
|
+ return TRUE;
|
|
+
|
|
if (nDstStep == 0)
|
|
nDstStep = nWidth * FreeRDPGetBytesPerPixel(DstFormat);
|
|
|