libwebp

mirror of https://github.com/webmproject/libwebp.git synced 2025-12-24 05:56:27 +01:00

Author SHA1 Message Date

Author	SHA1	Message	Date
Vincent Rabaud	a36ce6e442	[M108-LTS] Fix OOB write in BuildHuffmanTable. M108 merge issues: dec/vp8l_dec.c: - Conflicting checks before ReadHuffmanCodeLengths() return statement; In 114, an assignment follows the check instead of a return. - ReadHuffmanCodes(): Conflict after the changed huffman_tables check, there's an assignment in 114 instead of the setter call. First, BuildHuffmanTable is called to check if the data is valid. If it is and the table is not big enough, more memory is allocated. This will make sure that valid (but unoptimized because of unbalanced codes) streams are still decodable. Bug: chromium:1479274 Change-Id: I31c36dbf3aa78d35ecf38706b50464fd3d375741 (cherry picked from commit `902bc91903`)	2023-09-12 09:30:11 +00:00

Vincent Rabaud

a36ce6e442

[M108-LTS] Fix OOB write in BuildHuffmanTable.

M108 merge issues:
  dec/vp8l_dec.c:
    - Conflicting checks before ReadHuffmanCodeLengths() return statement;
    In 114, an assignment follows the check instead of a return.
    - ReadHuffmanCodes(): Conflict after the changed huffman_tables check,
    there's an assignment in 114 instead of the setter call.

First, BuildHuffmanTable is called to check if the data is valid.
If it is and the table is not big enough, more memory is allocated.

This will make sure that valid (but unoptimized because of unbalanced
codes) streams are still decodable.

Bug: chromium:1479274
Change-Id: I31c36dbf3aa78d35ecf38706b50464fd3d375741
(cherry picked from commit 902bc91903)

2023-09-12 09:30:11 +00:00

Compare commits

1 Commits

chrome-m10 ... chrome-m10

Diff Content Not Available

Compare commits

1 Commits chrome-m10 ... chrome-m10

Diff Content Not Available

1 Commits

chrome-m10 ... chrome-m10