RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-28 18:57:36 +00:00
Code Issues Activity Actions

LibGfx/ICC: Avoid buffer overrun when creating TextDescriptionTagData

Browse source 
We now validate that the offsets used cannot overflow, preventing
possible buffer overruns.
This commit is contained in:
Tim Ledbetter 2023-10-12 22:30:19 +01:00 • committed by Andreas Kling
parent 4b995542c4
commit c1d7a51391
3 changed files with 11 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Tests/LibGfx/TestICCProfile.cpp
View file

@ -262,6 +262,7 @@ TEST_CASE(to_lab)
TEST_CASE(malformed_profile)
{
Array test_inputs = {
TEST_INPUT("icc/oss-fuzz-testcase-57426.icc"sv),
TEST_INPUT("icc/oss-fuzz-testcase-59551.icc"sv),
TEST_INPUT("icc/oss-fuzz-testcase-60281.icc"sv)
};

BIN
Tests/LibGfx/test-inputs/icc/oss-fuzz-testcase-57426.icc Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 512 B