2008.08.29 22:53 "[Tiff] Some security fixes from RHEL", by Even Rouault

2008.09.03 20:47 "Re: [Tiff] Some security fixes from RHEL", by Edward Lam

I don't see Joris's patch anywhere on:

http://www.awaresystems.be/imaging/tiff/tml/tm200708.html

Does someone have a copy of it? And if we can find it, do we just
straight-up to the 3.9 branch? commit it

I'm not sure what patch you're referring to. Are you talking about the changes Joris did as eluded by Jay Berkenbilt here?

http://www.asmail.be/msg0055468514.html

AFAICT, those changes were never committed into the 3.9 branch. Using rev 1.79 of tiffio.h as a basis, it looks like the patch was this:

cvs diff -u -D 2007-08-10 -D 2007-08-11 tiffio.h tif_getimage.c (performed on a 3.9 branch)

Regards,

-Edward