Fix CVE-2016-10092:

http://bugzilla.maptools.org/show_bug.cgi?id=2620
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10092
https://security-tracker.debian.org/tracker/CVE-2016-10092

2016-12-03 Even Rouault <even.rouault at spatialys.com>

        * tools/tiffcrop.c: fix readContigStripsIntoBuffer() in -i (ignore)
	mode so that the output buffer is correctly incremented to avoid write
	outside bounds.
        Reported by Agostino Sarubbo.
        Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620

/cvs/maptools/cvsroot/libtiff/ChangeLog,v  <--  ChangeLog
new revision: 1.1178; previous revision: 1.1177
/cvs/maptools/cvsroot/libtiff/tools/tiffcrop.c,v  <--  tools/tiffcrop.c
new revision: 1.47; previous revision: 1.46

Index: libtiff/tools/tiffcrop.c
===================================================================
RCS file: /cvs/maptools/cvsroot/libtiff/tools/tiffcrop.c,v
retrieving revision 1.46
retrieving revision 1.47
diff -u -r1.46 -r1.47
--- libtiff/tools/tiffcrop.c	18 Nov 2016 14:58:46 -0000	1.46
+++ libtiff/tools/tiffcrop.c	3 Dec 2016 11:35:56 -0000	1.47
@@ -1,4 +1,4 @@
-/* $Id: tiffcrop.c,v 1.46 2016-11-18 14:58:46 erouault Exp $ */
+/* $Id: tiffcrop.c,v 1.47 2016-12-03 11:35:56 erouault Exp $ */
 
 /* tiffcrop.c -- a port of tiffcp.c extended to include manipulations of
  * the image data through additional options listed below
@@ -3698,7 +3698,7 @@
                                   (unsigned long) strip, (unsigned long)rows);
                         return 0;
                 }
-                bufp += bytes_read;
+                bufp += stripsize;
         }
 
         return 1;
d' value='a9680dbd762d7120febe38f398c22b83250d4e0c'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=a9680dbd762d7120febe38f398c22b83250d4e0c'>root</a>/<a href='/guix/log/gnu?id=a9680dbd762d7120febe38f398c22b83250d4e0c'>gnu</a>/<a href='/guix/log/gnu/services?id=a9680dbd762d7120febe38f398c22b83250d4e0c'>services</a>/<a href='/guix/log/gnu/services/mail.scm?id=a9680dbd762d7120febe38f398c22b83250d4e0c'>mail.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/services/mail.scm?id=a9680dbd762d7120febe38f398c22b83250d4e0c&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-04-21 00:06:40 +0200'>2020-04-21</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=b25ecfa2e0ab6642dc35f7f68a24117e33f5795f'>services: dovecot: 'stop' method returns #f upon success.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-03-16 14:05:52 +0100'>2020-03-16</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=a37e03d60e18dfcf119d0b92d9008e54fc350bf1'>tests: opensmtpd: Check /var/spool/mail instead of /var/mail.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-01-31 00:42:48 +0100'>2020-01-31</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=c3f146e79aca0efec5c0cbbf4e39c79e09268c15'>gnu: Update opensmtpd configuration grammar.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2019-09-21 16:48:36 +0200'>2019-09-21</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=ad34409e8581f8ad0273ddec277575fc112e1604'>services: dovecot: Fix predicate names for free-form fields</a><span class='msg-avail'>...</span></td><td>Alexey Abramov</td></tr>
<tr><td><span title='2019-06-20 15:54:51 +0200'>2019-06-20</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=ace8e269a40b31a9c6f413c0674529880da6a48e'>services: opensmtpd: Extend the PAM service.</a><span class='msg-avail'>...</span></td><td>Kristofer Buffington</td></tr>
<tr><td><span title='2019-06-20 10:43:25 +0200'>2019-06-20</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=f7dbf186b4fbe49bcfe22494804c9e3176a3dd0e'>services: Fix typo in (gnu services mail) exports.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2019-05-07 20:52:02 +0100'>2019-05-07</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=5b3d3cf71c1947bb43237b28d231d249f9dfbe49'>services: dovecot: Rename auth-verbose-passwords?.</a><span class='msg-avail'>...</span></td><td>Christopher Baines</td></tr>
<tr><td><span title='2019-04-07 14:18:01 +0800'>2019-04-07</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=412e6396bbb8b398e8a94427db50271e47db610f'>services: Add 'imap4d-service-type'.</a><span class='msg-avail'>...</span></td><td>宋文武</td></tr>
<tr><td><span title='2019-03-13 23:12:43 +0100'>2019-03-13</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=59e80445882f8b0379e54916f89510c0deda6698'>Remove traces of "GuixSD".</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-11-10 19:12:21 +0100'>2018-11-10</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=a7553a7360ac07ff114b807fc3026f08158d34c8'>services: dovecot: Set correct default value for the "auth" service.</a><span class='msg-avail'>...</span></td><td>Clément Lassieur</td></tr>
<tr><td><span title='2018-11-10 19:12:18 +0100'>2018-11-10</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=be8dd4a5fec804f2f004dd3a87c2872af44dc88d'>services: dovecot: Allow to set 'process-limit'.</a><span class='msg-avail'>...</span></td><td>Clément Lassieur</td></tr>
<tr><td><span title='2018-11-10 19:12:14 +0100'>2018-11-10</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=8d9bb4b4d05a20bef1cf7b1da2b1c5fb05f9b071'>services: dovecot: Allow to set 'client-limit'.</a><span class='msg-avail'>...</span></td><td>Clément Lassieur</td></tr>
<tr><td><span title='2018-03-09 17:02:31 +0300'>2018-03-09</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=6310dff1dc3d9a6979312f93466d58650c1fe322'>services: dovecot: Copy dovecot.conf to /etc/dovecot.</a><span class='msg-avail'>...</span></td><td>Oleg Pykhalov</td></tr>
<tr><td><span title='2017-12-23 07:11:14 +0100'>2017-12-23</span></td><td><a href='/guix/commit/gnu/services/mail.scm?id=28c03b4555e99da9524c697f5eba3783916050c7'>gnu: dovecot: Update to 2.3.0.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>