LadybirdBrowser/ladybird
1
1
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2024-09-11 13:36:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

LibGfx: Don't read past EOF in JPEGLoader

Browse Source 
Previously, it was possible to pass JPEGLoader a crafted input which
would read past the end of the stream. We now return an error in such
cases.
This commit is contained in:
Tim Ledbetter 2023-10-02 17:41:18 +01:00 committed by Jelle Raaijmakers
parent 001abbcd66
commit dd81bea9ef
Notes: sideshowbarker 2024-07-17 01:13:25 +09:00 
Author: https://github.com/tcl3
Commit: https://github.com/SerenityOS/serenity/commit/dd81bea9ef
Pull-request: https://github.com/SerenityOS/serenity/pull/21293
Reviewed-by: https://github.com/gmta ✅
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Userland/Libraries/LibGfx/ImageFormats/JPEGLoader.cpp
View File

@ -230,6 +230,9 @@ private:
VERIFY(m_byte_offset == m_current_size);
m_current_size = TRY(m_stream->read_some(m_buffer.span())).size();
if (m_current_size == 0)
return Error::from_string_literal("Unexpected end of file");
m_byte_offset = 0;
return {};