projects / libav.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8201ef3) | patch
avcodec/pngdec: Check IHDR/IDAT order
authorMichael Niedermayer <michaelni@gmx.at>
Wed, 26 Nov 2014 13:45:47 +0000 (14:45 +0100)
committerSylvain Beucler <beuc@debian.org>
Thu, 5 Dec 2019 16:27:00 +0000 (16:27 +0000)
commit064f5cbf8065d21f762c8e7b9d2a5dc1c5e0a438
tree0648186e544c5beac2f98c5888990a5ecc6d530ctree | snapshot
parent8201ef3c20a9910583602907cf6b4e3566d93901commit | diff
avcodec/pngdec: Check IHDR/IDAT order

avcodec/pngdec: Check IHDR/IDAT order

Fixes out of array access
Fixes: asan_heap-oob_20a6c26_2690_cov_3434532168_mail.png
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
[sunweaver] - Port this commit to libav in Debian jessie.

Gbp-Pq: Name CVE-2014-9317.patch
libavcodec/pngdec.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.