| /libtiff-4.0.7/tools/ |
| H A D | tiff2pdf.c | 3831 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() 3837 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() 3845 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() 3850 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() 3855 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() 3860 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() 3865 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() 3870 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() 3875 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() 3880 buffer[sizeof(buffer) - 1] = '\0'; in t2p_write_pdf_name() [all …]
|
| H A D | tiffcrop.c | 2460 _TIFFfree (seg_buffs[seg].buffer); in main() 4995 seg_buffs[i].buffer = NULL; in initPageSetup() 6891 crop_buff = seg_buffs[0].buffer; in writeSelections() 6911 crop_buff = seg_buffs[i].buffer; in writeSelections() 6927 crop_buff = seg_buffs[0].buffer; in writeSelections() 7374 crop_buff = seg_buffs[0].buffer; in processCropSelections() 7400 seg_buffs[0].buffer = crop_buff; in processCropSelections() 7465 seg_buffs[0].buffer = crop_buff; in processCropSelections() 7476 crop_buff = seg_buffs[i].buffer; in processCropSelections() 7502 seg_buffs[i].buffer = crop_buff; in processCropSelections() [all …]
|
| /libtiff-4.0.7/test/ |
| H A D | raw_decode.c | 82 unsigned char *target = buffer + cluster*6; in check_cluster() 108 unsigned char *buffer ) { in check_rgb_pixel() argument 109 unsigned char *rgb = buffer + 3 * pixel; in check_rgb_pixel() 130 uint32 *buffer ) { in check_rgba_pixel() argument 133 uint32 rgba = buffer[adjusted_pixel]; in check_rgba_pixel() 164 unsigned char *buffer; in main() local 204 buffer = (unsigned char *) malloc(sz); in main() 217 if( check_cluster( 0, buffer, cluster_0 ) in main() 222 free(buffer); in main() 235 buffer = (unsigned char *) malloc(sz); in main() [all …]
|
| /libtiff-4.0.7/libtiff/ |
| H A D | tif_jbig.c | 51 static int JBIGDecode(TIFF* tif, uint8* buffer, tmsize_t size, uint16 s) in JBIGDecode() argument 101 _TIFFmemcpy(buffer, pImage, jbg_dec_getsize(&decoder)); in JBIGDecode() 145 static void JBIGOutputBie(unsigned char* buffer, size_t len, void* userData) in JBIGOutputBie() argument 151 TIFFReverseBits(buffer, (tmsize_t)len); in JBIGOutputBie() 154 JBIGCopyEncodedData(tif, buffer, len, 0); in JBIGOutputBie() 157 static int JBIGEncode(TIFF* tif, uint8* buffer, tmsize_t size, uint16 s) in JBIGEncode() argument 168 &buffer, in JBIGEncode()
|
| H A D | tif_jpeg.c | 216 char buffer[JMSG_LENGTH_MAX]; in TIFFjpeg_error_exit() local 218 (*cinfo->err->format_message) (cinfo, buffer); in TIFFjpeg_error_exit() 232 char buffer[JMSG_LENGTH_MAX]; in TIFFjpeg_output_message() local 234 (*cinfo->err->format_message) (cinfo, buffer); in TIFFjpeg_output_message() 235 TIFFWarningExt(((JPEGState *) cinfo)->tif->tif_clientdata, "JPEGLib", "%s", buffer); in TIFFjpeg_output_message() 680 void* buffer; member 751 m.buffer=_TIFFmalloc(m.buffersize); in JPEGFixupTagsSubsampling() 752 if (m.buffer==NULL) in JPEGFixupTagsSubsampling() 766 _TIFFfree(m.buffer); in JPEGFixupTagsSubsampling() 903 if (TIFFReadFile(data->tif,data->buffer,(tmsize_t)m)!=(tmsize_t)m) in JPEGFixupTagsSubsamplingReadByte() [all …]
|
| H A D | tif_aux.c | 63 _TIFFCheckRealloc(TIFF* tif, void* buffer, in _TIFFCheckRealloc() argument 73 cp = _TIFFrealloc(buffer, bytes); in _TIFFCheckRealloc()
|
| H A D | tif_ojpeg.c | 2462 char buffer[JMSG_LENGTH_MAX]; in OJPEGLibjpegJpegErrorMgrOutputMessage() local 2463 (*cinfo->err->format_message)(cinfo,buffer); in OJPEGLibjpegJpegErrorMgrOutputMessage() 2464 TIFFWarningExt(((TIFF*)(cinfo->client_data))->tif_clientdata,"LibJpeg","%s",buffer); in OJPEGLibjpegJpegErrorMgrOutputMessage() 2470 char buffer[JMSG_LENGTH_MAX]; in OJPEGLibjpegJpegErrorMgrErrorExit() local 2471 (*cinfo->err->format_message)(cinfo,buffer); in OJPEGLibjpegJpegErrorMgrErrorExit() 2472 TIFFErrorExt(((TIFF*)(cinfo->client_data))->tif_clientdata,"LibJpeg","%s",buffer); in OJPEGLibjpegJpegErrorMgrErrorExit()
|
| /libtiff-4.0.7/contrib/tags/ |
| H A D | maketif.c | 60 char buffer[WIDTH]; in WriteImage() local 62 memset(buffer,0,sizeof(buffer)); in WriteImage() 64 if (!TIFFWriteScanline(tif, buffer, i, 0)) in WriteImage()
|
| /libtiff-4.0.7/contrib/mfs/ |
| H A D | mfs_file.c | 119 int mfs_open (void *buffer, int size, char *mode) in mfs_open() argument 151 if (buffer == (void *)NULL) in mfs_open() 158 buf[ret] = (char *)buffer; in mfs_open() 166 if (buffer != (void *)NULL) in mfs_open() 190 if (buffer == (void *) NULL) /* Create space for client */ in mfs_open() 207 buf[ret] = (char *)buffer; in mfs_open()
|
| /libtiff-4.0.7/contrib/iptcutil/ |
| H A D | iptcutil.c | 264 buffer[4]; in formatIPTC() local 271 buffer[i] = c; in formatIPTC() 273 taglen = (((long) buffer[ 0 ]) << 24) | in formatIPTC() 274 (((long) buffer[ 1 ]) << 16) | in formatIPTC() 275 (((long) buffer[ 2 ]) << 8) | in formatIPTC() 276 (((long) buffer[ 3 ])); in formatIPTC()
|
| /libtiff-4.0.7/contrib/dbs/xtiff/ |
| H A D | xtiff.c | 511 char buffer[BUFSIZ]; in SetNameLabel() local 515 snprintf(buffer, sizeof(buffer), "%s - page %d", fileName, tfDirectory); in SetNameLabel() 517 snprintf(buffer, sizeof(buffer), "%s", fileName); in SetNameLabel() 518 XtSetArg(args[0], XtNlabel, buffer); in SetNameLabel()
|
| /libtiff-4.0.7/ |
| H A D | HOWTO-SECURITY-RELEASE | 5 TIFF files which can come from hostile sources. Thus buffer overflows
|
| H A D | ChangeLog | 49 of source and destination buffer in memcpy() call in 923 buffer overflow. 999 the compressed input stream buffer. 1058 calculating allocation buffer sizes. 1075 * tools/thumbnail.c: fix out-of-buffer write 1262 ycbcr buffer (bug #2449, CVE-2013-4232) 1734 buffer overrun. 1854 * tools/gif2tiff.c: fix buffer overrun 1981 * tools/tiff2pdf.c: Fixed ID buffer filling in 2429 * libtiff/tif_lzw.c: Fix buffer underflow bug. [all …]
|
| /libtiff-4.0.7/config/ |
| H A D | ltmain.sh | 6007 /* static buffer for getcwd */
|
| /libtiff-4.0.7/m4/ |
| H A D | libtool.m4 | 1682 # (any single argument exceeding 2000 bytes causes a buffer overrun
|