mirrors/ladybird
0
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2025-08-07 08:39:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

LibGfx: Fix heap-overflow in BMP RLE

Browse source 
The field previously named 'data_size' apparently was misunderstood.
This commit is contained in:
Ben Wiederhake 2020-12-01 22:01:15 +01:00 • committed by Andreas Kling
commit 461bdeda2b
Notes: sideshowbarker 2024-07-19 01:06:42 +09:00
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Libraries/LibGfx/BMPLoader.cpp
View file

@ -931,7 +931,7 @@ static bool uncompress_bmp_rle_data(BMPLoadingContext& context, ByteBuffer& buff
return false; return false;
} }
Streamer streamer(context.file_bytes + context.data_offset, context.file_size); Streamer streamer(context.file_bytes + context.data_offset, context.file_size - context.data_offset);
auto compression = context.dib.info.compression; auto compression = context.dib.info.compression;