Return-Path: <tiff-bounces@lists.maptools.org>
Received: from inas007.isp.belgacom.be (localhost [127.0.0.1])
        by inav001.isp.belgacom.be (8.12.11/8.12.11/Skynet-IN-AV-3.00) with ESMTP id j8SDsR44005688
        for <joris.at.lebbeke@skynet.be>; Wed, 28 Sep 2005 15:54:27 +0200
        (envelope-from <tiff-bounces@lists.maptools.org>)
Received: from inmx014.isp.belgacom.be (inmx014.isp.belgacom.be [195.238.2.217])
        by inas007.isp.belgacom.be (8.12.11/8.12.11/Skynet-IN-AS-2.03) with ESMTP id j8SDsMZv010719
        for <joris.at.lebbeke@skynet.be>; Wed, 28 Sep 2005 15:54:23 +0200
        (envelope-from <tiff-bounces@lists.maptools.org>)
Received: from duke.maptools.org (r153.dmsolutions.ca [209.217.116.153] (may be forged))
        by inmx014.isp.belgacom.be (8.12.11/8.12.11/Skynet-IN-2.32) with ESMTP id j8SDsEoX016434
        for <joris.at.lebbeke@skynet.be>; Wed, 28 Sep 2005 15:54:14 +0200
        (envelope-from <tiff-bounces@lists.maptools.org>)
Received: from duke.maptools.org (duke.maptools.org [127.0.0.1])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id j8SDoQY4011821;
	Wed, 28 Sep 2005 09:50:31 -0400
Received: from qproxy.gmail.com (qproxy.gmail.com [72.14.204.200])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id j8SDoMHZ011818
	for <tiff@lists.maptools.org>; Wed, 28 Sep 2005 09:50:22 -0400
Received: by qproxy.gmail.com with SMTP id q12so424043qba
	for <tiff@lists.maptools.org>; Wed, 28 Sep 2005 06:50:22 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=hCHc4yFB0AzX+z5GQKri+D37fFAOn67EznYHakzCvOLmnMDXyG/JjHeTC1dfygIMOMABez7QygHYtEqJ8ggHN3VmIT9vLoD3nqdWD88274K/XCmeN7oPHNyK34WBd+7kxZLmVD0rGMiH5dTtwpqf9oSmb/f63yT6UuESAVPV/3s=
Received: by 10.65.159.19 with SMTP id l19mr1142443qbo;
	Wed, 28 Sep 2005 06:50:22 -0700 (PDT)
Received: by 10.65.155.11 with HTTP; Wed, 28 Sep 2005 06:50:22 -0700 (PDT)
Message-ID: <931f8ea9050928065078e34e3e@mail.gmail.com>
Date: Wed, 28 Sep 2005 09:50:22 -0400
From: Frank Warmerdam <warmerdam@pobox.com>
To: "edward@sidefx.com" <edward@sidefx.com>
Subject: Re: [Tiff] PSP libtiff hack?
In-Reply-To: <2069.64.229.169.237.1127880288.squirrel@webmail.sidefx.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Disposition: inline
References: <931f8ea905092717492b79dca1@mail.gmail.com>
	<2069.64.229.169.237.1127880288.squirrel@webmail.sidefx.com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by duke.maptools.org id
	j8SDoMHZ011818
Cc: TIFF <tiff@lists.maptools.org>
X-BeenThere: tiff@lists.maptools.org
X-Mailman-Version: 2.1.4
Precedence: list
Reply-To: Frank Warmerdam <warmerdam@pobox.com>
List-Id: TIFF and libtiff discussion <tiff.lists.maptools.org>
List-Unsubscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=unsubscribe>
List-Archive: <http://lists.maptools.org/mailman/private/tiff>
List-Post: <mailto:tiff@lists.maptools.org>
List-Help: <mailto:tiff-request@lists.maptools.org?subject=help>
List-Subscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=subscribe>
Sender: tiff-bounces@lists.maptools.org
Errors-To: tiff-bounces@lists.maptools.org
X-UIDL: 000000000023ceae.00000ca7
X-MSP-STORE: Wed, 28 Sep 2005 15:54:32 +0200
Status:   

On 9/28/05, edward@sidefx.com <edward@sidefx.com> wrote:
> > I tried the file in question with TIFFOpen() and it seems to have no
> > problem.  That is TIFFOpen() properly identifies it as corrupt and gives
> > up.  So I think the vulnerability has already been corrected in the
> > current libtiff.
>
> Hmm ... I would like to see valgrind run to be sure though. :)

Edward,

Tried that. :-)

warmerda@gdal2200[4]% vg tiffinfo overflow.tif
==3303== Memcheck, a memory error detector for x86-linux.
==3303== Copyright (C) 2002-2005, and GNU GPL'd, by Julian Seward et al.
==3303== Using valgrind-2.4.0, a program supervision framework for x86-linux.
==3303== Copyright (C) 2000-2005, and GNU GPL'd, by Julian Seward et al.
==3303== For more details, rerun with: -v
==3303==
overflow.tif: Warning, incorrect count for field "BitsPerSample"
(16496, expecting 3); tag trimmed.
overflow.tif: Error fetching data for field "BitsPerSample".
==3303==
==3303== FILE DESCRIPTORS: 3 open at exit.
==3303== Open file descriptor 2: /dev/pts/3
==3303==    <inherited from parent>
==3303==
==3303== Open file descriptor 1: /dev/pts/3
==3303==    <inherited from parent>
==3303==
==3303== Open file descriptor 0: /dev/pts/3
==3303==    <inherited from parent>
==3303==
==3303==
==3303== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 20 from 1)
==3303== malloc/free: in use at exit: 0 bytes in 0 blocks.
==3303== malloc/free: 5 allocs, 5 frees, 34345 bytes allocated.
==3303== For counts of detected errors, rerun with: -v
==3303== No malloc'd blocks -- no leaks are possible.

Best regards,
--
---------------------------------------+--------------------------------------
I set the clouds in motion - turn up   | Frank Warmerdam, warmerdam@pobox.com
light and sound - activate the windows | http://pobox.com/~warmerdam
and watch the world go round - Rush    | Geospatial Programmer for Rent

_______________________________________________
Tiff mailing list: Tiff@lists.maptools.org
http://lists.maptools.org/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
