190964b668
opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
35 lines
1.1 KiB
Makefile
35 lines
1.1 KiB
Makefile
################################################################################
|
|
#
|
|
# openjpeg
|
|
#
|
|
################################################################################
|
|
|
|
OPENJPEG_VERSION = 2.3.1
|
|
OPENJPEG_SITE = $(call github,uclouvain,openjpeg,v$(OPENJPEG_VERSION))
|
|
OPENJPEG_LICENSE = BSD-2-Clause
|
|
OPENJPEG_LICENSE_FILES = LICENSE
|
|
OPENJPEG_INSTALL_STAGING = YES
|
|
|
|
# 0004-convertbmp-detect-invalid-file-dimensions-early.patch
|
|
# 0005-bmp_read_rle4_data-avoid-potential-infinite-loop.patch
|
|
OPENJPEG_IGNORE_CVES += CVE-2019-12973
|
|
|
|
# 0006-opj_j2k_update_image_dimensions-reject-images-whose-coordinates.patch
|
|
OPENJPEG_IGNORE_CVES += CVE-2020-6851
|
|
|
|
# 0007-opj_tcd_init_tile-avoid-integer-overflow.patch
|
|
OPENJPEG_IGNORE_CVES += CVE-2020-8112
|
|
|
|
OPENJPEG_DEPENDENCIES += $(if $(BR2_PACKAGE_ZLIB),zlib)
|
|
OPENJPEG_DEPENDENCIES += $(if $(BR2_PACKAGE_LIBPNG),libpng)
|
|
OPENJPEG_DEPENDENCIES += $(if $(BR2_PACKAGE_TIFF),tiff)
|
|
OPENJPEG_DEPENDENCIES += $(if $(BR2_PACKAGE_LCMS2),lcms2)
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_HAS_THREADS),y)
|
|
OPENJPEG_CONF_OPTS += -DOPJ_USE_THREAD=ON
|
|
else
|
|
OPENJPEG_CONF_OPTS += -DOPJ_USE_THREAD=OFF
|
|
endif
|
|
|
|
$(eval $(cmake-package))
|