tree c697be7f10f9263b2dbb4b9f5ca9be486c6a018b
parent d0dbe6303812bf4f9a365ca686171b0d2f80b193
author Teow Wan Yee <wy.teow@hi-p.com> 1472003436 +0800
committer Jeron Susan <jeron.susan@hi-p.com> 1472010424 +0800

FPII-2292 : Update- Remote code execution vulnerability in libjhead CVE-2016-3822 A-30074856

A-30074856 The offsetval length passed to ProcessExifDir in jhead could lead
to an out-of-bounds write.
This fix is designed to check offsetval for an integer overflow to prevent an
out-of-bounds write.

Change-Id: I168017a307b8a63dea793dd1a82b8c3dec3a69fa