libwebp/src/dec
James Zern 30763333f3 libwebp: validate chunk size in ParseOptionalChunks
the max wasn't checked leading to a rollover case, possibly exploitable.
additionally check the RIFF size early, to avoid similar issues.

pulled from chromium:
 http://codereview.chromium.org/11229048/

Change-Id: Ifebc712bf3d3de0129b76ca4c57c68e062abc429
2012-10-22 21:57:59 -07:00
..
alpha.c Move consts to internal header format_constants.h 2012-05-24 15:02:02 +05:30
buffer.c fix alpha-plane check + add extra checks 2012-08-03 14:44:35 -07:00
decode_vp8.h move decode_vp8.h from webp/ to dec/ 2012-07-16 22:12:59 -07:00
frame.c harness some malloc/calloc to use WebPSafeMalloc and WebPSafeCalloc 2012-08-01 12:06:04 -07:00
idec.c add support for ARGB -> YUVA conversion for lossless decoder 2012-08-03 15:41:01 -07:00
io.c dec/io.c: cosmetics 2012-08-15 10:27:54 -07:00
layer.c cosmetics: normalize copyright headers 2012-01-06 14:49:06 -08:00
Makefile.am move decode_vp8.h from webp/ to dec/ 2012-07-16 22:12:59 -07:00
quant.c replace x*155/100 by x*101581>>16 2012-07-24 15:06:00 -07:00
tree.c cosmetics: normalize copyright headers 2012-01-06 14:49:06 -08:00
vp8.c harness some malloc/calloc to use WebPSafeMalloc and WebPSafeCalloc 2012-08-01 12:06:04 -07:00
vp8i.h bump version to 0.2.0 2012-08-03 15:41:01 -07:00
vp8l.c Alignment fix 2012-08-10 02:10:32 +05:30
vp8li.h add support for ARGB -> YUVA conversion for lossless decoder 2012-08-03 15:41:01 -07:00
webp.c libwebp: validate chunk size in ParseOptionalChunks 2012-10-22 21:57:59 -07:00
webpi.h move decode_vp8.h from webp/ to dec/ 2012-07-16 22:12:59 -07:00