From 25f96fe50baab58244927291119730fa129fc0b0 Mon Sep 17 00:00:00 2001 From: Jiyong Min Date: Fri, 28 Apr 2017 18:18:07 +0900 Subject: [PATCH] Apply CVE-2016-3177 Use-after-free in gifcolor Remove unnecessary duplicate EGifClose(). (Fixes SF bug #83) Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors. https://nvd.nist.gov/vuln/detail/CVE-2016-3177 Change-Id: I24e077f2a3fbd6554d2557c4bdd94e06e3e08661 Signed-off-by: Jiyong Min --- util/gifcolor.c | 3 --- 1 file changed, 3 deletions(-) diff --git a/util/gifcolor.c b/util/gifcolor.c index 1700b07..b3e586b 100644 --- a/util/gifcolor.c +++ b/util/gifcolor.c @@ -123,9 +123,6 @@ int main(int argc, char **argv) if (EGifCloseFile(GifFile, &ErrorCode) == GIF_ERROR) { PrintGifError(ErrorCode); - if (GifFile != NULL) { - EGifCloseFile(GifFile, NULL); - } exit(EXIT_FAILURE); } -- 2.7.4