James Zern 30763333f3 libwebp: validate chunk size in ParseOptionalChunks ...

the max wasn't checked leading to a rollover case, possibly exploitable.
additionally check the RIFF size early, to avoid similar issues.

pulled from chromium:
 http://codereview.chromium.org/11229048/

Change-Id: Ifebc712bf3d3de0129b76ca4c57c68e062abc429

2012-10-22 21:57:59 -07:00

..

alpha.c

Move consts to internal header format_constants.h

2012-05-24 15:02:02 +05:30

buffer.c

fix alpha-plane check + add extra checks

2012-08-03 14:44:35 -07:00

decode_vp8.h

move decode_vp8.h from webp/ to dec/

2012-07-16 22:12:59 -07:00

frame.c

harness some malloc/calloc to use WebPSafeMalloc and WebPSafeCalloc

2012-08-01 12:06:04 -07:00

idec.c

add support for ARGB -> YUVA conversion for lossless decoder

2012-08-03 15:41:01 -07:00

io.c

dec/io.c: cosmetics

2012-08-15 10:27:54 -07:00

layer.c

cosmetics: normalize copyright headers

2012-01-06 14:49:06 -08:00

Makefile.am

move decode_vp8.h from webp/ to dec/

2012-07-16 22:12:59 -07:00

quant.c

replace x*155/100 by x*101581>>16

2012-07-24 15:06:00 -07:00

tree.c

cosmetics: normalize copyright headers

2012-01-06 14:49:06 -08:00

vp8.c

harness some malloc/calloc to use WebPSafeMalloc and WebPSafeCalloc

2012-08-01 12:06:04 -07:00

vp8i.h

bump version to 0.2.0

2012-08-03 15:41:01 -07:00

vp8l.c

Alignment fix

2012-08-10 02:10:32 +05:30

vp8li.h

add support for ARGB -> YUVA conversion for lossless decoder

2012-08-03 15:41:01 -07:00

webp.c

libwebp: validate chunk size in ParseOptionalChunks

2012-10-22 21:57:59 -07:00

webpi.h

move decode_vp8.h from webp/ to dec/

2012-07-16 22:12:59 -07:00