dany/libwebp
1
0
Fork 0
mirror of https://github.com/webmproject/libwebp.git synced 2025-12-23 21:46:26 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix potential overflow in imageio

Browse Source 
BUG: 836597550
Change-Id: I7c00f4cb831142113e6c27e632f989e8cd84ef76
This commit is contained in:
Vincent Rabaud
2025-11-25 12:42:39 +01:00
parent a3dddea9b5
commit 3532891de4
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
imageio/webpdec.c
View File

@@ -196,7 +196,8 @@ int ReadWebP(const uint8_t* const data, size_t data_size,
#endif
output_buffer->u.RGBA.rgba = (uint8_t*)pic->argb;
output_buffer->u.RGBA.stride = pic->argb_stride * sizeof(uint32_t);
output_buffer->u.RGBA.size = output_buffer->u.RGBA.stride * pic->height;
output_buffer->u.RGBA.size =
(size_t)output_buffer->u.RGBA.stride * pic->height;
} else {
output_buffer->colorspace = has_alpha ? MODE_YUVA : MODE_YUV;
output_buffer->u.YUVA.y = pic->y;
@@ -207,10 +208,12 @@ int ReadWebP(const uint8_t* const data, size_t data_size,
output_buffer->u.YUVA.u_stride = pic->uv_stride;
output_buffer->u.YUVA.v_stride = pic->uv_stride;
output_buffer->u.YUVA.a_stride = has_alpha ? pic->a_stride : 0;
output_buffer->u.YUVA.y_size = pic->height * pic->y_stride;
output_buffer->u.YUVA.u_size = (pic->height + 1) / 2 * pic->uv_stride;
output_buffer->u.YUVA.v_size = (pic->height + 1) / 2 * pic->uv_stride;
output_buffer->u.YUVA.a_size = pic->height * pic->a_stride;
output_buffer->u.YUVA.y_size = (size_t)pic->height * pic->y_stride;
output_buffer->u.YUVA.u_size =
(size_t)(pic->height + 1) / 2 * pic->uv_stride;
output_buffer->u.YUVA.v_size =
(size_t)(pic->height + 1) / 2 * pic->uv_stride;
output_buffer->u.YUVA.a_size = (size_t)pic->height * pic->a_stride;
}
output_buffer->is_external_memory = 1;