From 10b4587df9652f9a4e36f2bbc64e607dcce9f3ba Mon Sep 17 00:00:00 2001 From: Reinhard Tartler Date: Sat, 4 Mar 2023 12:49:03 -0500 Subject: [PATCH] Fix Integer Overflow, CVE-2022-2454 --- debian/patches/CVE-2022-2454.patch | 19 +++++++++++++++++++ debian/patches/series | 1 + 2 files changed, 20 insertions(+) create mode 100644 debian/patches/CVE-2022-2454.patch diff --git a/debian/patches/CVE-2022-2454.patch b/debian/patches/CVE-2022-2454.patch new file mode 100644 index 0000000..cdffaac --- /dev/null +++ b/debian/patches/CVE-2022-2454.patch @@ -0,0 +1,19 @@ +commit faa75edde3dfeba1e2cf6ffa48e45a50f1042096 +Author: jeanlf +Date: Tue Jul 12 18:00:35 2022 +0200 + + fixed #2213 + +diff --git a/src/laser/lsr_dec.c b/src/laser/lsr_dec.c +index 99d16aaa7..488babb10 100644 +--- a/src/laser/lsr_dec.c ++++ b/src/laser/lsr_dec.c +@@ -838,6 +838,8 @@ static void lsr_read_id(GF_LASeRCodec *lsr, GF_Node *n) + + static Fixed lsr_translate_coords(GF_LASeRCodec *lsr, u32 val, u32 nb_bits) + { ++ if (!nb_bits) return 0; ++ + #ifdef GPAC_FIXED_POINT + if (val >> (nb_bits-1) ) { + s32 neg = (s32) val - (1<