Searched refs:td_stripoffset (Results 1 – 14 of 14) sorted by relevance
/AliOS-Things-master/components/SDL2/src/image/external/tiff-4.0.9/ |
A D | libtiff-CVE-2017-18013.patch | 20 - (unsigned __int64) td->td_stripoffset[s], 22 + td->td_stripoffset ? (unsigned __int64) td->td_stripoffset[s] : 0, 27 - (unsigned long long) td->td_stripoffset[s], 29 + td->td_stripoffset ? (unsigned long long) td->td_stripoffset[s] : 0,
|
A D | libtiff-CVE-2018-10779.patch | 14 td->td_stripoffset = (uint64 *) 22 if (td->td_stripoffset == NULL || td->td_stripbytecount == NULL)
|
A D | libtiff-CVE-2017-11613.patch | 10 memory for the td_stripbytecount and td_stripoffset arrays.
|
A D | ChangeLog | 1001 * libtiff/tif_dirwrite.c: avoid null pointer dereference on td_stripoffset 2073 corrupted image where tif->tif_dir.td_stripoffset == NULL (bug #2471) 4328 to new tstrile_t, types of td_stripoffset and td_stripbytecount to
|
/AliOS-Things-master/components/SDL2/src/image/external/tiff-4.0.9/libtiff/ |
A D | tif_write.c | 542 td->td_stripoffset = (uint64 *) in TIFFSetupStrips() 548 if (td->td_stripoffset == NULL || td->td_stripbytecount == NULL) in TIFFSetupStrips() 554 _TIFFmemset(td->td_stripoffset, 0, td->td_nstrips*sizeof (uint64)); in TIFFSetupStrips() 615 if (tif->tif_dir.td_stripoffset == NULL && !TIFFSetupStrips(tif)) { in TIFFWriteCheck() 689 new_stripoffset = (uint64*)_TIFFrealloc(td->td_stripoffset, in TIFFGrowStrips() 702 td->td_stripoffset = new_stripoffset; in TIFFGrowStrips() 704 _TIFFmemset(td->td_stripoffset + td->td_nstrips, in TIFFGrowStrips() 725 if (td->td_stripoffset[strip] == 0 || tif->tif_curoff == 0) { in TIFFAppendToStrip() 729 && td->td_stripoffset[strip] != 0 in TIFFAppendToStrip() 739 if (!SeekOK(tif, td->td_stripoffset[strip])) { in TIFFAppendToStrip() [all …]
|
A D | tif_read.c | 229 read_offset = td->td_stripoffset[strip] in TIFFFillStripPartial() 601 if (!SeekOK(tif, td->td_stripoffset[strip])) { in TIFFReadRawStrip1() 627 if ((td->td_stripoffset[strip] > (uint64)TIFF_TMSIZE_T_MAX)|| in TIFFReadRawStrip1() 677 if (!SeekOK(tif, td->td_stripoffset[strip_or_tile])) { in TIFFReadRawStripOrTile2() 830 td->td_stripoffset[strip] > (uint64)tif->tif_size - bytecount) { in TIFFFillStrip() 842 (unsigned __int64) tif->tif_size - td->td_stripoffset[strip], in TIFFFillStrip() 850 (unsigned long long) tif->tif_size - td->td_stripoffset[strip], in TIFFFillStrip() 1103 if (!SeekOK(tif, td->td_stripoffset[tile])) { in TIFFReadRawTile1() 1133 ma=(tmsize_t)td->td_stripoffset[tile]; in TIFFReadRawTile1() 1277 td->td_stripoffset[tile] > (uint64)tif->tif_size - bytecount) { in TIFFFillTile() [all …]
|
A D | tif_print.c | 670 td->td_stripoffset ? (unsigned __int64) td->td_stripoffset[s] : 0, in TIFFPrintDirectory() 675 td->td_stripoffset ? (unsigned long long) td->td_stripoffset[s] : 0, in TIFFPrintDirectory()
|
A D | tif_dir.h | 98 uint64* td_stripoffset; member
|
A D | tif_dirread.c | 4149 (tif->tif_dir.td_stripoffset[0] <= TIFFGetFileSize(tif) && \ in TIFFReadDirectory() 4158 && tif->tif_dir.td_stripoffset[0] != 0 in TIFFReadDirectory() 4218 if (tif->tif_dir.td_stripoffset[strip - 1] > in TIFFReadDirectory() 4219 tif->tif_dir.td_stripoffset[strip]) { in TIFFReadDirectory() 5730 offset = td->td_stripoffset[0]; in ChopUpSingleUncompressedStrip() 5807 _TIFFfree(td->td_stripoffset); in ChopUpSingleUncompressedStrip() 5809 td->td_stripoffset = newoffsets; in ChopUpSingleUncompressedStrip() 5824 if( td->td_stripoffset != NULL ) in _TIFFFillStrilesInternal() 5831 td->td_nstrips,&td->td_stripoffset)) in _TIFFFillStrilesInternal() 5851 if (tif->tif_dir.td_stripoffset[strip - 1] > in _TIFFFillStrilesInternal() [all …]
|
A D | tif_dir.c | 1007 *va_arg(ap, uint64**) = td->td_stripoffset; in _TIFFVGetField() 1271 CleanupField(td_stripoffset); in TIFFFreeDirectory()
|
A D | tif_dirwrite.c | 198 if (tif->tif_dir.td_stripoffset == NULL) in TIFFCheckpointDirectory() 557 if (tif->tif_dir.td_stripoffset != NULL && in TIFFWriteDirectorySec() 558 …Long8Array(tif,&ndir,dir,TIFFTAG_STRIPOFFSETS,tif->tif_dir.td_nstrips,tif->tif_dir.td_stripoffset)) in TIFFWriteDirectorySec() 563 …gLong8Array(tif,&ndir,dir,TIFFTAG_TILEOFFSETS,tif->tif_dir.td_nstrips,tif->tif_dir.td_stripoffset)) in TIFFWriteDirectorySec()
|
A D | tif_jpeg.c | 789 || tif->tif_dir.td_stripoffset == NULL in JPEGFixupTagsSubsampling() 809 m.fileoffset=tif->tif_dir.td_stripoffset[0]; in JPEGFixupTagsSubsampling()
|
A D | tif_ojpeg.c | 1995 || sp->tif->tif_dir.td_stripoffset == NULL in OJPEGReadBufferFill() 2003 sp->in_buffer_file_pos=sp->tif->tif_dir.td_stripoffset[sp->in_buffer_next_strile]; in OJPEGReadBufferFill()
|
/AliOS-Things-master/components/SDL2/src/image/external/tiff-4.0.9/contrib/pds/ |
A D | tif_pdsdirread.c | 324 if (td->td_stripoffset[i] + td->td_stripbytecount[i] > filesize) in EstimateStripByteCounts() 326 filesize - td->td_stripoffset[i]; in EstimateStripByteCounts() 1064 uint32 offset = td->td_stripoffset[0]; in ChopUpSingleUncompressedStrip() 1120 _TIFFfree(td->td_stripoffset); in ChopUpSingleUncompressedStrip() 1122 td->td_stripoffset = newoffsets; in ChopUpSingleUncompressedStrip()
|
Completed in 41 milliseconds