已合并
漏洞CVE-2026-25646修复 #107
g30052652创建于 2月25日
漏洞CVE-2026-25646修复 #107
已合并
共 2 个文件变更+22-2
| @@ -0,0 +1,18 @@ | |||
| 1 | +diff --git a/pngrtran.c b/pngrtran.c | ||
| 2 | +index 7002044..c631164 100644 | ||
| 3 | +--- a/pngrtran.c | ||
| 4 | ++++ b/pngrtran.c | ||
| 5 | + png_set_quantize(png_structrp png_ptr, png_colorp palette, | ||
| 6 | + break; | ||
| 7 | + | ||
| 8 | + t->next = hash[d]; | ||
| 9 | +- t->left = (png_byte)i; | ||
| 10 | +- t->right = (png_byte)j; | ||
| 11 | ++ t->left = png_ptr->palette_to_index[i]; | ||
| 12 | ++ t->right = png_ptr->palette_to_index[j]; | ||
| 13 | + hash[d] = t; | ||
| 14 | + } | ||
| 15 | + } | ||
| 16 | +-- | ||
| 17 | +2.1.4 | ||
| 18 | + | ||
| @@ -48,7 +48,8 @@ def move_file(src_path, dst_path): | |||
| 48 | "CVE-2026-22695.patch", | 48 | "CVE-2026-22695.patch", |
| 49 | "CVE-2026-22801.patch", | 49 | "CVE-2026-22801.patch", |
| 50 | "CVE-2025-28162.patch", | 50 | "CVE-2025-28162.patch", |
| 51 | - "CVE-2025-28164.patch" | 51 | + "CVE-2025-28164.patch", |
| 52 | + "CVE-2026-25646.patch" | ||
| 52 | ] | 53 | ] |
| 53 | for file in files: | 54 | for file in files: |
| 54 | src_file = os.path.join(src_path, file) | 55 | src_file = os.path.join(src_path, file) |
| @@ -84,7 +85,8 @@ def do_patch(target_dir): | |||
| 84 | "CVE-2026-22695.patch", | 85 | "CVE-2026-22695.patch", |
| 85 | "CVE-2026-22801.patch", | 86 | "CVE-2026-22801.patch", |
| 86 | "CVE-2025-28162.patch", | 87 | "CVE-2025-28162.patch", |
| 87 | - "CVE-2025-28164.patch" | 88 | + "CVE-2025-28164.patch", |
| 89 | + "CVE-2026-25646.patch" | ||
| 88 | ] | 90 | ] |
| 89 | 91 | ||
| 90 | for patch in patch_file: | 92 | for patch in patch_file: |