jbig2.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 prevent checking too early for buffer overrun
 The code has reached near the end of the buffer so you can not just
 take the last 4 bytes, in this case you have to read any remaining
 bytes and make a return value based on that, in this edge case you have
 no bytes to read so the return value is zero.

jbig2.c | 4 2 + 2 - 0 !
jbig2.h | 8 5 + 3 - 0 !
jbig2_generic.c | 2 1 + 1 - 0 !
jbig2_halftone.c | 24 11 + 13 - 0 !
jbig2_huffman.c | 10 5 + 5 - 0 !
jbig2_huffman.h | 2 1 + 1 - 0 !
jbig2_image.c | 32 16 + 16 - 0 !
jbig2_mmr.c | 66 34 + 32 - 0 !
jbig2_page.c | 6 3 + 3 - 0 !
jbig2_priv.h | 4 2 + 2 - 0 !
jbig2_segment.c | 10 5 + 5 - 0 !
jbig2_symbol_dict.c | 73 37 + 36 - 0 !
jbig2_symbol_dict.h | 6 3 + 3 - 0 !
jbig2_text.c | 16 8 + 8 - 0 !
jbig2_text.h | 2 1 + 1 - 0 !
15 files changed, 134 insertions(+), 131 deletions(-)

 squash signed/unsigned warnings in msvc jbig2 build
 Also rename "new" to "new_dict", because "new" is a bad variable name.

jbig2_image.c | 2 1 + 1 - 0 !
jbig2_mmr.c | 2 1 + 1 - 0 !
jbig2_symbol_dict.c | 9 2 + 7 - 0 !
3 files changed, 4 insertions(+), 9 deletions(-)

 fix warnings: remove unsigned < 0 tests that are always false

jbig2_huffman.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 bug 697693: prevent segv due to integer overflow.
 While building a Huffman table, the start and end points were susceptible
 to integer overflow.
 .
Thank you to Jiaqi for finding this issue and suggesting a patch.

jbig2_symbol_dict.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 bug 697703: prevent integer overflow vulnerability.
 Add extra check for the offset being greater than the size
 of the image and hence reading off the end of the buffer.
 .
 Thank you to Dai Ge for finding this issue and suggesting a patch.

jbig2_image.c | 3 2 + 1 - 0 !
1 file changed, 2 insertions(+), 1 deletion(-)

 bug 697683: bounds check before reading from image source data.
 Add extra check to prevent reading off the end of the image source
 data buffer.
 .
 Thank you to Dai Ge for finding this issue and suggesting a patch.

test_jbig2dec.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

autogen.sh | 23 0 + 23 - 0 !
config_types.h.in | 19 19 + 0 - 0 !
2 files changed, 19 insertions(+), 23 deletions(-)

 extract header infile oddly embedded in autogen script.

Makefile.am | 4 3 + 1 - 0 !
1 file changed, 3 insertions(+), 1 deletion(-)

 don't compile unrelated and unusable memento memory debugging code