RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-25 16:17:45 +00:00
Code Issues Activity Actions

LibGfx: Prevent potential heap-overflow in BMP non-RLE

Browse source
This commit is contained in:
Ben Wiederhake 2020-12-01 22:22:20 +01:00 • committed by Andreas Kling
parent 461bdeda2b
commit 6be9b6349d
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Libraries/LibGfx/BMPLoader.cpp
View file

@ -1200,7 +1200,7 @@ static bool decode_bmp_pixel_data(BMPLoadingContext& context)
return false; return false;
} }
auto buffer = ByteBuffer::wrap(const_cast<u8*>(context.file_bytes + context.data_offset), context.file_size); auto buffer = ByteBuffer::wrap(const_cast<u8*>(context.file_bytes + context.data_offset), context.file_size - context.data_offset);
if (context.dib.info.compression == Compression::RLE4 || context.dib.info.compression == Compression::RLE8 if (context.dib.info.compression == Compression::RLE4 || context.dib.info.compression == Compression::RLE8
|| context.dib.info.compression == Compression::RLE24) { || context.dib.info.compression == Compression::RLE24) {