From 0d80d6e8264aec256602bea1604d27c4596b7e2b Mon Sep 17 00:00:00 2001 From: Markeryang <747675909@qq.com> Date: Mon, 10 Aug 2020 11:18:24 +0800 Subject: [PATCH] =?UTF-8?q?=E5=88=A0=E9=99=A4=E6=96=87=E4=BB=B6=200001-CVE?= =?UTF-8?q?-2019-16865-2.patch?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 0001-CVE-2019-16865-2.patch | 38 ------------------------------------- 1 file changed, 38 deletions(-) delete mode 100644 0001-CVE-2019-16865-2.patch diff --git a/0001-CVE-2019-16865-2.patch b/0001-CVE-2019-16865-2.patch deleted file mode 100644 index 1a154af..0000000 --- a/0001-CVE-2019-16865-2.patch +++ /dev/null @@ -1,38 +0,0 @@ -From 88d9a3994bc244f14d0f594755ac896a235017c5 Mon Sep 17 00:00:00 2001 -From: Andrew Murray -Date: Sun, 29 Sep 2019 14:14:38 +1000 -Subject: [PATCH] Added decompression bomb checks - -Signed-off-by: hanxinke ---- - src/PIL/GifImagePlugin.py | 1 + - src/PIL/IcoImagePlugin.py | 1 + - 2 files changed, 2 insertions(+) - -diff --git a/src/PIL/GifImagePlugin.py b/src/PIL/GifImagePlugin.py -index 107c015..70eebf9 100644 ---- a/src/PIL/GifImagePlugin.py -+++ b/src/PIL/GifImagePlugin.py -@@ -252,6 +252,7 @@ class GifImageFile(ImageFile.ImageFile): - self.dispose = None - elif self.disposal_method == 2: - # replace with background colour -+ Image._decompression_bomb_check(self.size) - self.dispose = Image.core.fill("P", self.size, - self.info["background"]) - else: -diff --git a/src/PIL/IcoImagePlugin.py b/src/PIL/IcoImagePlugin.py -index 589ef3c..926838d 100644 ---- a/src/PIL/IcoImagePlugin.py -+++ b/src/PIL/IcoImagePlugin.py -@@ -167,6 +167,7 @@ class IcoFile(object): - else: - # XOR + AND mask bmp frame - im = BmpImagePlugin.DibImageFile(self.buf) -+ Image._decompression_bomb_check(im.size) - - # change tile dimension to only encompass XOR image - im._size = (im.size[0], int(im.size[1] / 2)) --- -2.19.1 -