]> dgit.raspbian.org Git - gnome-shell.git/commit
shell/util: Validate create_pixbuf_from_data() parameters
authorFlorian Müllner <fmuellner@gnome.org>
Thu, 20 Aug 2026 23:13:09 +0000 (01:13 +0200)
committerFlorian Müllner <fmuellner@gnome.org>
Sun, 13 Sep 2026 18:25:54 +0000 (20:25 +0200)
commitd710f00a56522a72b9b27e3c0feca3b70dee71cf
tree26c81bf20e6c92be8c73aaf9e1ae7a79239f79c3
parentb443183c30f27dcb5f62826b71453fef92f70c65
shell/util: Validate create_pixbuf_from_data() parameters

The function is used to create a pixbuf from image data for
a search provider or notification client.

Without validation, a malicious client can provide a data array that
is smaller than the size required by the passed image parameters,
which will eventually result in out-of-bound reads.

Closes: https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/9365
Part-of: <https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/4418>
(cherry picked from commit 8a3f208d0123b4831b1a4ba1040acc4f9091d465)
src/shell-util.c