Andreas Kling 531c3fe72e LibGfx: Fix OOB access in GIF deinterlacing ...

It was possible to go outside the interlacing row strid/offset arrays.
Just fail the decode if this is about to happen. I've added a FIXME
about rejecting such images earlier, since it's a bit sad to only do
this once we realize the pass index is about to overflow.

Found by oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28239

2020-12-22 10:09:41 +01:00

23 KiB

Raw Blame History

View Raw