about summary refs log tree commit diff
path: root/README.md
diff options
context:
space:
mode:
authorNguyễn Gia Phong <cnx@loang.net>2025-01-29 09:04:41 +0900
committerNguyễn Gia Phong <cnx@loang.net>2025-01-29 09:04:41 +0900
commit60c7b4dd4a9fb16180d1b2f4d3b7a79eade89567 (patch)
tree63378248ad01195f95f7a1e553cb3e0056cb5237 /README.md
parentfa0ff68e806afd6474abdbd2f20d464bb8cc20b4 (diff)
downloadloftix-60c7b4dd4a9fb16180d1b2f4d3b7a79eade89567.tar.gz
Sort CVEs
Diffstat (limited to 'README.md')
-rw-r--r--README.md24
1 files changed, 12 insertions, 12 deletions
diff --git a/README.md b/README.md
index 6d1062e..b739d0a 100644
--- a/README.md
+++ b/README.md
@@ -43,17 +43,6 @@ Then run `guix pull`.
 
     guix shell jasper@1.900.19 -- imginfo -f bugs/cve-2016-9557/reproducer
 
-### CVE-2017-15232
-
-[NULL pointer dereference in quantize_ord_dither function][mozjpeg-268]
-
-    guix shell libjpeg-turbo@1.5.2 --\
-      djpeg -crop "1x1+16+16" -onepass -dither ordered -dct float -colors 8\
-        -targa -grayscale -outfile o bugs/cve-2017-15232/1.jpg
-    guix shell libjpeg-turbo@1.5.2 --\
-      djpeg -crop "1x1+16+16" -onepass -dither ordered -dct float -colors 8\
-        -targa -grayscale -outfile o bugs/cve-2017-15232/2.jpg
-
 ### CVE-2017-14745
 
 [Integer overflow in elf64-x86-64.c, binutils 2.29.1][sourceware-22148]
@@ -66,6 +55,17 @@ Then run `guix pull`.
 
     guix shell binutils@2.29 -- nm -l bugs/cve-2017-15025/3899.crashes.bin
 
+### CVE-2017-15232
+
+[NULL pointer dereference in quantize_ord_dither function][mozjpeg-268]
+
+    guix shell libjpeg-turbo@1.5.2 --\
+      djpeg -crop "1x1+16+16" -onepass -dither ordered -dct float -colors 8\
+        -targa -grayscale -outfile o bugs/cve-2017-15232/1.jpg
+    guix shell libjpeg-turbo@1.5.2 --\
+      djpeg -crop "1x1+16+16" -onepass -dither ordered -dct float -colors 8\
+        -targa -grayscale -outfile o bugs/cve-2017-15232/2.jpg
+
 [Guix channel]: https://guix.gnu.org/manual/devel/en/html_node/Channels.html
 [AFLRun]: https://trong.loang.net/~cnx/afl++/log?h=run
 [AFL++]: https://github.com/AFLplusplus/AFLplusplus
@@ -73,6 +73,6 @@ Then run `guix pull`.
 [e9patch]: https://github.com/GJDuck/e9patch
 [python-pacfix]: https://github.com/hsh814/pacfix-python
 [jasper-d42b238]: https://blogs.gentoo.org/ago/2016/11/19/jasper-signed-integer-overflow-in-jas_image-c
-[mozjpeg-268]: https://github.com/mozilla/mozjpeg/issues/268
 [sourceware-22148]: https://sourceware.org/bugzilla/show_bug.cgi?id=22148
 [sourceware-22186]: https://sourceware.org/bugzilla/show_bug.cgi?id=22186
+[mozjpeg-268]: https://github.com/mozilla/mozjpeg/issues/268