mirror of
https://github.com/RGBCube/serenity
synced 2025-05-31 10:18:11 +00:00

DC and AC table IDs read in the scan header segment weren't validated against the IDs of Huffman tables read in the DHT segment. This caused an OOB read when a Huffman table was accessed using the ID read in the scan header segment. Furthermore, the decoder now replaces the old DC or AC table if a redefinition has been found prior to the scan header. Fixes #3439.
25 lines
809 B
HTML
25 lines
809 B
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<title>Pretty JPEG Pictures</title>
|
|
</head>
|
|
<body>
|
|
<div>
|
|
<h3>Issue-3439</h3>
|
|
<img alt="lena" src="jpgsuite_files/offending-3439.jpg"/><br>
|
|
<h3>Non-subsampled Lena</h3> <br>
|
|
<img alt="lena" src="jpgsuite_files/non-subsampled-lena.jpg"/> <br>
|
|
<h3>Chroma Horizontally Halved Lena</h3> <br>
|
|
<img alt="lena" src="jpgsuite_files/horizontally-halved-lena.jpg"/> <br>
|
|
<h3>Chroma Vertically Halved Lena</h3> <br>
|
|
<img alt="lena" src="jpgsuite_files/vertically-halved-lena.jpg"/> <br>
|
|
<h3>Chroma Quartered Lena</h3> <br>
|
|
<img alt="lena" src="jpgsuite_files/chroma-quartered-lena.jpg"/><br>
|
|
</div>
|
|
<div>
|
|
<h3>Oh Lena!</h3> <br>
|
|
<img alt="lena" src="jpgsuite_files/oh-lena.jpg"/>
|
|
</div>
|
|
</body>
|
|
</html>
|