openjpeg/src
Hugo Lefeuvre 8ee335227b convertbmp: detect invalid file dimensions early
width/length dimensions read from bmp headers are not necessarily
valid. For instance they may have been maliciously set to very large
values with the intention to cause DoS (large memory allocation, stack
overflow). In these cases we want to detect the invalid size as early
as possible.

This commit introduces a counter which verifies that the number of
written bytes corresponds to the advertized width/length.

Fixes #1059 (CVE-2018-6616).
2018-12-14 05:10:35 +01:00
..
bin convertbmp: detect invalid file dimensions early 2018-12-14 05:10:35 +01:00
lib [JP3D] To avoid divisions by zero / undefined behaviour on shift (CVE-2018-14423 2018-11-28 14:39:15 +08:00
CMakeLists.txt trunk: fixed cmake config so as to be able to link opj_jpip_server with FCGI. 2013-10-30 08:59:23 +00:00