TIFFWriteDirectorySec: avoid assertion. 65/181565/5 accepted/tizen/unified/20180618.151451 submit/tizen/20180618.003916
authorJiyong Min <jiyong.min@samsung.com>
Thu, 14 Jun 2018 23:03:02 +0000 (08:03 +0900)
committerJiyong Min <jiyong.min@samsung.com>
Thu, 14 Jun 2018 23:25:08 +0000 (08:25 +0900)
Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2795. CVE-2018-10963

Change-Id: I451e25eb6daa43422ed8a8b241203c7d5072c727

libtiff/tif_dirwrite.c [changed mode: 0644->0755]

old mode 100644 (file)
new mode 100755 (executable)
index c68d6d2..0cd76ff
@@ -697,8 +697,11 @@ TIFFWriteDirectorySec(TIFF* tif, int isimage, int imagedone, uint64* pdiroff)
                                                                }
                                                                break;
                                                        default:
-                                                               assert(0);   /* we should never get here */
-                                                               break;
+                                                               TIFFErrorExt(tif->tif_clientdata, module,
+                                                                       "Cannot write tag %d (%s)",
+                                                                           TIFFFieldTag(o),
+                                                                           o->field_name ? o->field_name : "unknown");
+                                                               goto bad;
                                                }
                                        }
                                }