summarylogtreecommitdiffstats
path: root/jasper-1.900.1-CVE-2016-2116.patch
diff options
context:
space:
mode:
Diffstat (limited to 'jasper-1.900.1-CVE-2016-2116.patch')
-rw-r--r--jasper-1.900.1-CVE-2016-2116.patch14
1 files changed, 14 insertions, 0 deletions
diff --git a/jasper-1.900.1-CVE-2016-2116.patch b/jasper-1.900.1-CVE-2016-2116.patch
new file mode 100644
index 000000000000..ee3f41bfa734
--- /dev/null
+++ b/jasper-1.900.1-CVE-2016-2116.patch
@@ -0,0 +1,14 @@
+Description: Prevent jas_stream_t memory leak in jas_iccprof_createfrombuf()
+Author: Tyler Hicks <tyhicks@canonical.com>
+
+--- jasper-1.900.1-debian1.orig/src/libjasper/base/jas_icc.c
++++ jasper-1.900.1-debian1/src/libjasper/base/jas_icc.c
+@@ -1693,6 +1693,8 @@ jas_iccprof_t *jas_iccprof_createfrombuf
+ jas_stream_close(in);
+ return prof;
+ error:
++ if (in)
++ jas_stream_close(in);
+ return 0;
+ }
+