# libtiff: Properly zero out the string table. Fixes CVE-2008-2327 security issue.

**URL:** <https://discourse.libsdl.org/t/libtiff-properly-zero-out-the-string-table-fixes-cve-2008-2327-security-issue/35730>\
**Category:** SDL Commits\
**Created:** [May 7, 2022, 7:10pm UTC](https://discourse.libsdl.org/t/libtiff-properly-zero-out-the-string-table-fixes-cve-2008-2327-security-issue/35730 "2022-05-07T19:10:27Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![SDLPushPostBot](https://discourse.libsdl.org/user_avatar/discourse.libsdl.org/sdlpushpostbot/32/4370_2.png) [@SDLPushPostBot](https://discourse.libsdl.org/u/SDLPushPostBot)\
**Post date:** [May 7, 2022, 7:10pm UTC](https://discourse.libsdl.org/t/libtiff-properly-zero-out-the-string-table-fixes-cve-2008-2327-security-issue/35730/1 "2022-05-07T19:10:27Z")

</div>

> <https://github.com/libsdl-org/libtiff/commit/6f9bf5769fdf28fcfa9255bc17af77528a93fc45>

```diff
From 6f9bf5769fdf28fcfa9255bc17af77528a93fc45 Mon Sep 17 00:00:00 2001
From: Andrey Kiselev <[EMAIL REDACTED]>
Date: Wed, 3 Sep 2008 07:09:09 +0000
Subject: [PATCH] Properly zero out the string table. Fixes CVE-2008-2327
 security issue.

---
 libtiff/tif_lzw.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/libtiff/tif_lzw.c b/libtiff/tif_lzw.c
index fd20571c..6471cf42 100644
--- a/libtiff/tif_lzw.c
+++ b/libtiff/tif_lzw.c
@@ -1,4 +1,4 @@
-/* $Id: tif_lzw.c,v 1.29.2.1 2007-11-22 21:24:51 fwarmerdam Exp $ */
+/* $Id: tif_lzw.c,v 1.29.2.2 2008-09-03 07:09:09 dron Exp $ */
 
 /*
  * Copyright (c) 1988-1997 Sam Leffler
@@ -414,6 +414,8 @@ LZWDecode(TIFF* tif, tidata_t op0, tsize_t occ0, tsample_t s)
 			break;
 		if (code == CODE_CLEAR) {
 			free_entp = sp->dec_codetab + CODE_FIRST;
+ _TIFFmemset(free_entp, 0,
+ (CSIZE - CODE_FIRST) * sizeof (code_t));
 			nbits = BITS_MIN;
 			nbitsmask = MAXCODE(BITS_MIN);
 			maxcodep = sp->dec_codetab + nbitsmask-1;
@@ -610,6 +612,8 @@ LZWDecodeCompat(TIFF* tif, tidata_t op0, tsize_t occ0, tsample_t s)
 			break;
 		if (code == CODE_CLEAR) {
 			free_entp = sp->dec_codetab + CODE_FIRST;
+ _TIFFmemset(free_entp, 0,
+ (CSIZE - CODE_FIRST) * sizeof (code_t));
 			nbits = BITS_MIN;
 			nbitsmask = MAXCODE(BITS_MIN);
 			maxcodep = sp->dec_codetab + nbitsmask;

```