jzern@google.com d38bd0dda0 WebPFlipBuffer: fix integer overflow ...

with large scale values the offset to the end of the buffer may exceed
32-bits range.

src/dec/buffer_dec.c:158:39: runtime error: signed integer overflow: 2 *
1275068416 cannot be represented in type 'int'
  #0 0x56444802bea5 in WebPFlipBuffer src/dec/buffer_dec.c:158:39

Bug: chromium:1196850
Change-Id: I08c8b69ada5d5dd3e9bf2b9006dffa0c5f2103a5

2021-06-10 15:26:34 -07:00

..

alpha_dec.c

cosmetics: remove use of 'sanity' / 'master'

2021-05-21 10:38:40 -07:00

alphai_dec.h

cosmetics: normalize include guard comment

2018-08-22 14:46:53 -07:00

buffer_dec.c

WebPFlipBuffer: fix integer overflow

2021-06-10 15:26:34 -07:00

common_dec.h

cosmetics: normalize include guard comment

2018-08-22 14:46:53 -07:00

frame_dec.c

fix UBSAN warning

2019-12-13 13:26:16 +00:00

idec_dec.c

idec_dec: fix 0 offset of NULL pointer

2019-12-14 17:14:30 -08:00

io_dec.c

Fix skia bug #10952

2020-11-18 14:59:34 +01:00

Makefile.am

remove WEBP_EXPERIMENTAL_FEATURES

2018-02-09 10:25:11 -08:00

quant_dec.c

BitTrace: if BITTRACE is > 0, record and print syntax bits used

2019-03-15 07:23:50 +01:00

tree_dec.c

BitTrace: if BITTRACE is > 0, record and print syntax bits used

2019-03-15 07:23:50 +01:00

vp8_dec.c

cosmetics: remove use of 'sanity' / 'master'

2021-05-21 10:38:40 -07:00

vp8_dec.h

cosmetics: normalize include guard comment

2018-08-22 14:46:53 -07:00

vp8i_dec.h

bump version to 1.2.0

2020-12-23 19:54:29 -08:00

vp8l_dec.c

cosmetics: remove use of 'sanity' / 'master'

2021-05-21 10:38:40 -07:00

vp8li_dec.h

cosmetics: normalize '*' association

2019-07-26 01:04:09 -07:00

webp_dec.c

WebPIoInitFromOptions: treat use_scaling as a bool

2021-04-23 11:46:45 -07:00

webpi_dec.h

add WebPCheckCropDimensions()

2021-04-23 11:46:45 -07:00