desktop-packages team mailing list archive

[Ubuntu Foundations Team Bug Bot <1439186@xxxxxxxxxxxxxxxxxx>]

The attachment "Fixed version of the patch causing problem" seems to be
a patch.  If it isn't, please remove the "patch" flag from the
attachment, remove the "patch" tag, and if you are a member of the
~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issues please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to tiff in Ubuntu.
https://bugs.launchpad.net/bugs/1439186

Title:
  [REGRESSION] Predictor tag fails to be written correctly

Status in tiff package in Ubuntu:
  New

Bug description:
  The patch debian/patches/CVE-2014-8128-5.patch appears to break saving TIFF files with compression predictor.
  It seems the data is correctly saved, but the "predictor" tag is not, which prevents reading the data correctly again.

  This happens both on precise (release 3.9.5-2ubuntu1.7) and on trusty
  (release 4.0.3-7ubuntu0.2).

  I'm attaching an example TIFF file "small.tiff" for showing the
  behaviour. It is compressed in LZW without predictor, so it is
  written/read correctly.

  However, if you recompress it with this command, the error happens:
  $ tiffcp -c lzw:2 small.tiff small-c2.tiff

  Then displaying it in eog shows a completely different image. Tiffinfo indicates a problem with the tags:
  $ tiffinfo small-c2-bad.tiff | grep Predictor
  TIFFReadDirectory: Warning, small-c2-bad.tiff: unknown field with tag 8224 (0x2020) encountered.

  Comparing it with a good version of the file (generated with a previous version of libtiff):
  $ tiffinfo small-c2-good.tiff | grep Predictor
    Predictor: horizontal differencing 2 (0x2)

  $ tiffcmp small-c2.tiff small-c2-good.tiff 
  TIFFReadDirectory: Warning, small-c2-bad.tiff: unknown field with tag 8224 (0x2020) encountered.
  Predictor tag appears only in small-c2-good.tiff

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/1439186/+subscriptions