Blame SOURCES/CVE-2017-18236.patch

a3db16
From 6e59eea0adc5d8e0a1fc30a509a229b79e93d785 Mon Sep 17 00:00:00 2001
a3db16
From: =?UTF-8?q?Hubert=20Figui=C3=A8re?= <hub@figuiere.net>
a3db16
Date: Fri, 2 Feb 2018 09:55:53 -0500
a3db16
Subject: [PATCH 3/5] Bug 102484 - Fix an infinite loop in ASF parser.
a3db16
a3db16
---
a3db16
 source/XMPFiles/FormatSupport/ASF_Support.cpp | 2 ++
a3db16
 1 file changed, 2 insertions(+)
a3db16
a3db16
diff --git a/source/XMPFiles/FormatSupport/ASF_Support.cpp b/source/XMPFiles/FormatSupport/ASF_Support.cpp
a3db16
index 1180f9d..e57b56d 100644
a3db16
--- a/source/XMPFiles/FormatSupport/ASF_Support.cpp
a3db16
+++ b/source/XMPFiles/FormatSupport/ASF_Support.cpp
a3db16
@@ -266,6 +266,8 @@ bool ASF_Support::ReadHeaderObject ( LFA_FileRef fileRef, ObjectState& inOutObje
a3db16
 
a3db16
 				this->ReadHeaderExtensionObject ( fileRef, inOutObjectState, pos, objectBase );
a3db16
 
a3db16
+			} else if (objectBase.size == 0) {
a3db16
+				break;
a3db16
 			}
a3db16
 
a3db16
 			pos += objectBase.size;
a3db16
-- 
a3db16
2.17.2
a3db16