diff options
author | JustOff <Off.Just.Off@gmail.com> | 2018-06-29 21:02:12 +0300 |
---|---|---|
committer | JustOff <Off.Just.Off@gmail.com> | 2018-06-29 21:02:12 +0300 |
commit | 56c9d0f6bf81511f14a7741a878305dbb3a2ea14 (patch) | |
tree | cb38da4843b5b85d32f2a6f8a5076ed5e223e55d /media/libwebp/dec/buffer_dec.c | |
parent | 05e6fcc0247af89209010eae0a2acdb1d16f95a5 (diff) | |
download | UXP-56c9d0f6bf81511f14a7741a878305dbb3a2ea14.tar UXP-56c9d0f6bf81511f14a7741a878305dbb3a2ea14.tar.gz UXP-56c9d0f6bf81511f14a7741a878305dbb3a2ea14.tar.lz UXP-56c9d0f6bf81511f14a7741a878305dbb3a2ea14.tar.xz UXP-56c9d0f6bf81511f14a7741a878305dbb3a2ea14.zip |
Apply known security patches (webp:381,383,384) to libwebp-1.0.0
Diffstat (limited to 'media/libwebp/dec/buffer_dec.c')
-rw-r--r-- | media/libwebp/dec/buffer_dec.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/media/libwebp/dec/buffer_dec.c b/media/libwebp/dec/buffer_dec.c index c7565c1bf..d72d32b0a 100644 --- a/media/libwebp/dec/buffer_dec.c +++ b/media/libwebp/dec/buffer_dec.c @@ -74,7 +74,8 @@ static VP8StatusCode CheckDecBuffer(const WebPDecBuffer* const buffer) { } else { // RGB checks const WebPRGBABuffer* const buf = &buffer->u.RGBA; const int stride = abs(buf->stride); - const uint64_t size = MIN_BUFFER_SIZE(width, height, stride); + const uint64_t size = + MIN_BUFFER_SIZE(width * kModeBpp[mode], height, stride); ok &= (size <= buf->size); ok &= (stride >= width * kModeBpp[mode]); ok &= (buf->rgba != NULL); |