2005.09.28 14:49 "Re: [Tiff] PSP libtiff hack?", by Bob Friesenhahn

On Wed, 28 Sep 2005 edward@sidefx.com wrote:

I tried the file in question with TIFFOpen() and it seems to have no problem. That is TIFFOpen() properly identifies it as corrupt and gives up. So I think the vulnerability has already been corrected in the current libtiff.

Hmm... I would like to see valgrind run to be sure though. :)

I tested GraphicsMagick under valgrind on this file and no errors were detected. GraphicsMagick uses libtiff.

Bob
======================================
Bob Friesenhahn
bfriesen@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer, http://www.GraphicsMagick.org/