Fix CVE-2016-10092:

http://bugzilla.maptools.org/show_bug.cgi?id=2620
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10092
https://security-tracker.debian.org/tracker/CVE-2016-10092

2016-12-03 Even Rouault <even.rouault at spatialys.com>

        * tools/tiffcrop.c: fix readContigStripsIntoBuffer() in -i (ignore)
	mode so that the output buffer is correctly incremented to avoid write
	outside bounds.
        Reported by Agostino Sarubbo.
        Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620

/cvs/maptools/cvsroot/libtiff/ChangeLog,v  <--  ChangeLog
new revision: 1.1178; previous revision: 1.1177
/cvs/maptools/cvsroot/libtiff/tools/tiffcrop.c,v  <--  tools/tiffcrop.c
new revision: 1.47; previous revision: 1.46

Index: libtiff/tools/tiffcrop.c
===================================================================
RCS file: /cvs/maptools/cvsroot/libtiff/tools/tiffcrop.c,v
retrieving revision 1.46
retrieving revision 1.47
diff -u -r1.46 -r1.47
--- libtiff/tools/tiffcrop.c	18 Nov 2016 14:58:46 -0000	1.46
+++ libtiff/tools/tiffcrop.c	3 Dec 2016 11:35:56 -0000	1.47
@@ -1,4 +1,4 @@
-/* $Id: tiffcrop.c,v 1.46 2016-11-18 14:58:46 erouault Exp $ */
+/* $Id: tiffcrop.c,v 1.47 2016-12-03 11:35:56 erouault Exp $ */
 
 /* tiffcrop.c -- a port of tiffcp.c extended to include manipulations of
  * the image data through additional options listed below
@@ -3698,7 +3698,7 @@
                                   (unsigned long) strip, (unsigned long)rows);
                         return 0;
                 }
-                bufp += bytes_read;
+                bufp += stripsize;
         }
 
         return 1;
d' value='3c5698046a4b4c8934866e0195e899f73163020d'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=3c5698046a4b4c8934866e0195e899f73163020d'>root</a>/<a href='/guix/log/gnu?id=3c5698046a4b4c8934866e0195e899f73163020d'>gnu</a>/<a href='/guix/log/gnu/packages?id=3c5698046a4b4c8934866e0195e899f73163020d'>packages</a>/<a href='/guix/log/gnu/packages/nano.scm?id=3c5698046a4b4c8934866e0195e899f73163020d'>nano.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/nano.scm?id=3c5698046a4b4c8934866e0195e899f73163020d&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2017-03-02 12:39:26 +0200'>2017-03-02</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=1a10cefc91cc954ef62ca069c02a35031deb4944'>gnu: nano: Update to 2.7.5.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2017-01-12 23:40:39 +0100'>2017-01-12</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=5bb9dbc0a89746943cb54c2b940c58fbaeda7fdf'>gnu: nano: Update to 2.7.4.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-01-04 05:14:22 +0100'>2017-01-04</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=02dadd382790cf561d981ce023f0daf53a5608ca'>gnu: nano: Update to 2.7.3.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2016-12-13 04:30:04 +0100'>2016-12-13</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=2f79bbfc01d92edd4eea87c83dd326baeac75ba9'>gnu: nano: Update to 2.7.2.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2016-11-13 00:34:16 +0100'>2016-11-13</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=2cab1dd58b9a8fb4db8f46a0b00e1358fc0de21b'>Merge branch 'core-updates'</a></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2016-11-07 07:55:01 +0200'>2016-11-07</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=fbc44ef2cdedddc2d227f2c977043090f8877406'>gnu: nano: Update to 2.7.1.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2016-09-30 12:05:27 +0200'>2016-09-30</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=79355ae3e84359716f5135cc7083e72246bc8bf9'>Merge branch 'master' into core-updates</a></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2016-09-28 17:54:50 +0300'>2016-09-28</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=b94a6ca074f00b3f769933d074853d3c3ca50d00'>gnu: Add and use gettext-minimal.</a><span class='msg-avail'>...</span></td><td>Alex Kost</td></tr>
<tr><td><span title='2016-09-04 16:48:44 -0400'>2016-09-04</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=f7c9b01f29a3e7a347b9b47db06a7cf1746df521'>gnu: nano: Update to 2.7.0.</a><span class='msg-avail'>...</span></td><td>Rene Saavedra</td></tr>
<tr><td><span title='2016-03-04 11:48:52 +0100'>2016-03-04</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=ffaf83dfb10a3c55c069fe05bc9e5d830fe843ed'>gnu: nano: Update to 2.5.3.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2016-02-15 15:49:13 +0200'>2016-02-15</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=e0ef3708f78d621ce4798444a7bffb9ab1bd99eb'>gnu: nano: Update to 2.5.2.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2016-01-24 06:46:01 +0200'>2016-01-24</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=4c73302739e700636d12c2d85330985f208213b6'>gnu: nano: Update to 2.5.1.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2015-12-06 16:49:41 +0200'>2015-12-06</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=2f52ad7413aabecb7ef7b210d6d958b8aface9d4'>gnu: nano: Update to 2.5.0.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2015-11-21 20:56:08 +0200'>2015-11-21</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=f94f481988e7dfbd9d4a8d1e1aa57f72c5965338'>gnu: nano: Update to 2.4.3.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2015-07-21 01:00:23 +0200'>2015-07-21</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=aac90b4a956b93a95baf86f3753ff0bc9061cd22'>gnu: nano: Update to 2.4.2.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2015-04-18 20:16:57 +0200'>2015-04-18</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=24ba72402b97bca49ef03a97c13a5cce23d97418'>gnu: nano: Update to 2.4.1.</a><span class='msg-avail'>...</span></td><td>Andreas Enge</td></tr>
<tr><td><span title='2015-03-26 16:40:54 +0100'>2015-03-26</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=0afc0afede54c9d9a0c88ea6f3731f9ccaf5de93'>gnu: nano: Update to 2.4.0.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2014-07-23 23:06:55 +0200'>2014-07-23</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=1b4f23bdf6169959cb734b99f50401faf0f86d2e'>gnu: nano: Upgrade to 2.3.6.</a><span class='msg-avail'>...</span></td><td>Andreas Enge</td></tr>
<tr><td><span title='2014-06-25 11:47:58 +0200'>2014-06-25</span></td><td><a href='/guix/commit/gnu/packages/nano.scm?id=7f27b32f31c42b6316dd94ba3e41a5ce7d5f4a09'>gnu: nano: Upgrade to 2.3.4.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>