dany/libwebp
1
0
Fork 0
mirror of https://github.com/webmproject/libwebp.git synced 2025-10-12 21:46:44 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix potential integer overflow

Browse Source 
Bug: 447862936

Change-Id: I58129333520facf213b7961a284e07fe04a0e55e
This commit is contained in:
Vincent Rabaud
2025-09-29 21:07:22 +02:00
parent 13f42ea2d2
commit 158b533d3e
1 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
src/enc/picture_csp_enc.c
View File

@@ -185,15 +185,15 @@ static int ImportYUVAFromRGBA(const uint8_t* r_ptr, const uint8_t* g_ptr,
picture->y_stride, picture->uv_stride,
picture->a_stride, dst_y, dst_u, dst_v, dst_a);
if (height & 1) {
dst_y += (height - 1) * picture->y_stride;
dst_u += (height >> 1) * picture->uv_stride;
dst_v += (height >> 1) * picture->uv_stride;
r_ptr += (height - 1) * rgb_stride;
b_ptr += (height - 1) * rgb_stride;
g_ptr += (height - 1) * rgb_stride;
dst_y += (height - 1) * (uint64_t)picture->y_stride;
dst_u += (height >> 1) * (uint64_t)picture->uv_stride;
dst_v += (height >> 1) * (uint64_t)picture->uv_stride;
r_ptr += (height - 1) * (uint64_t)rgb_stride;
b_ptr += (height - 1) * (uint64_t)rgb_stride;
g_ptr += (height - 1) * (uint64_t)rgb_stride;
if (has_alpha) {
dst_a += (height - 1) * picture->a_stride;
a_ptr += (height - 1) * rgb_stride;
dst_a += (height - 1) * (uint64_t)picture->a_stride;
a_ptr += (height - 1) * (uint64_t)rgb_stride;
}
WebPImportYUVAFromRGBALastLine(r_ptr, g_ptr, b_ptr, a_ptr, step,
has_alpha, width, tmp_rgb, dst_y, dst_u,