https://bugzilla.redhat.com/attachment.cgi?id=425925 Index: libtiff/tif_ojpeg.c =================================================================== --- libtiff/tif_ojpeg.c.orig +++ libtiff/tif_ojpeg.c @@ -1948,6 +1948,10 @@ OJPEGReadBufferFill(OJPEGState* sp) sp->in_buffer_file_pos=0; else { + if (sp->tif->tif_dir.td_stripbytecount == 0) { + TIFFErrorExt(sp->tif->tif_clientdata,sp->tif->tif_name,"Strip byte counts are missing"); + return(0); + } sp->in_buffer_file_togo=sp->tif->tif_dir.td_stripbytecount[sp->in_buffer_next_strile]; if (sp->in_buffer_file_togo==0) sp->in_buffer_file_pos=0;