Google Git
Sign in
flutter / third_party / libjpeg-turbo / 1e81b0c3ea26f4ea8f56de05367469333de64a9f
commit1e81b0c3ea26f4ea8f56de05367469333de64a9f[log] [tgz]
authorDRC <information@libjpeg-turbo.org>Thu Mar 31 09:49:49 2016 -0500
committerDRC <information@libjpeg-turbo.org>Thu Mar 31 09:54:14 2016 -0500
tree01effaa05aa7f43cdd24be03d6f242b762845c8f
parent6f241d4d425296badbf6b4f9477fbc3cace5a8fc [diff]
cjpeg: Fix buf overrun caused by bad bin PPM input

This extends the fix in 6709e4a0cfa44d4f54ee8ad05753d4aa9260cb91 to
include binary PPM/PGM files, thus preventing a malformed binary
PPM/PGM input file from triggering an overrun of the rescale array and
potentially crashing cjpeg.

Note that this issue affected only cjpeg and not the underlying
libjpeg-turbo libraries, and thus it did not represent a security
threat.

Thanks to @hughdavenport for the discovery.
2 files changed
tree: 01effaa05aa7f43cdd24be03d6f242b762845c8f
  1. cmakescripts/
  2. doc/
  3. java/
  4. md5/
  5. release/
  6. sharedlib/
  7. simd/
  8. testimages/
  9. win/
  10. .gitignore
  11. acinclude.m4
  12. bmp.c
  13. bmp.h
  14. BUILDING.txt
  15. cderror.h
  16. cdjpeg.c
  17. cdjpeg.h
  18. change.log
  19. ChangeLog.txt
  20. cjpeg.1
  21. cjpeg.c
  22. CMakeLists.txt
  23. coderules.txt
  24. configure.ac
  25. djpeg.1
  26. djpeg.c
  27. doxygen-extra.css
  28. doxygen.config
  29. example.c
  30. jaricom.c
  31. jcapimin.c
  32. jcapistd.c
  33. jcarith.c
  34. jccoefct.c
  35. jccolext.c
  36. jccolor.c
  37. jcdctmgr.c
  38. jchuff.c
  39. jchuff.h
  40. jcinit.c
  41. jcmainct.c
  42. jcmarker.c
  43. jcmaster.c
  44. jcomapi.c
  45. jconfig.h.in
  46. jconfig.txt
  47. jconfigint.h.in
  48. jcparam.c
  49. jcphuff.c
  50. jcprepct.c
  51. jcsample.c
  52. jcstest.c
  53. jctrans.c
  54. jdapimin.c
  55. jdapistd.c
  56. jdarith.c
  57. jdatadst-tj.c
  58. jdatadst.c
  59. jdatasrc-tj.c
  60. jdatasrc.c
  61. jdcoefct.c
  62. jdcol565.c
  63. jdcolext.c
  64. jdcolor.c
  65. jdct.h
  66. jddctmgr.c
  67. jdhuff.c
  68. jdhuff.h
  69. jdinput.c
  70. jdmainct.c
  71. jdmarker.c
  72. jdmaster.c
  73. jdmerge.c
  74. jdmrg565.c
  75. jdmrgext.c
  76. jdphuff.c
  77. jdpostct.c
  78. jdsample.c
  79. jdtrans.c
  80. jerror.c
  81. jerror.h
  82. jfdctflt.c
  83. jfdctfst.c
  84. jfdctint.c
  85. jidctflt.c
  86. jidctfst.c
  87. jidctint.c
  88. jidctred.c
  89. jinclude.h
  90. jmemmgr.c
  91. jmemnobs.c
  92. jmemsys.h
  93. jmorecfg.h
  94. jpeg_nbits_table.h
  95. jpegcomp.h
  96. jpegint.h
  97. jpeglib.h
  98. jpegtran.1
  99. jpegtran.c
  100. jquant1.c
  101. jquant2.c
  102. jsimd.h
  103. jsimd_none.c
  104. jsimddct.h
  105. jstdhuff.c
  106. jutils.c
  107. jversion.h
  108. libjpeg.map.in
  109. libjpeg.txt
  110. LICENSE.txt
  111. Makefile.am
  112. rdbmp.c
  113. rdcolmap.c
  114. rdgif.c
  115. rdjpgcom.1
  116. rdjpgcom.c
  117. rdppm.c
  118. rdrle.c
  119. rdswitch.c
  120. rdtarga.c
  121. README
  122. README-turbo.txt
  123. structure.txt
  124. tjbench.c
  125. tjbenchtest.in
  126. tjbenchtest.java.in
  127. tjexampletest.in
  128. tjunittest.c
  129. tjutil.c
  130. tjutil.h
  131. transupp.c
  132. transupp.h
  133. turbojpeg-jni.c
  134. turbojpeg-mapfile
  135. turbojpeg-mapfile.jni
  136. turbojpeg.c
  137. turbojpeg.h
  138. usage.txt
  139. wizard.txt
  140. wrbmp.c
  141. wrgif.c
  142. wrjpgcom.1
  143. wrjpgcom.c
  144. wrppm.c
  145. wrrle.c
  146. wrtarga.c