1. 02 Feb, 2017 1 commit
    • Steinar H. Gunderson's avatar
      speedhq: fix out-of-bounds write · 08b09816
      Steinar H. Gunderson authored
      Certain alpha run lengths (for SHQ1/SHQ3/SHQ5) could be stored in
      both long and short versions, and we would only accept the short version,
      returning -1 (invalid code) for the others. This could cause an
      out-of-bounds write on malicious input, as discovered by
      Andreas Cadhalpun during fuzzing.
      
      Fix by simply allowing both versions, leaving no invalid codes
      in the alpha VLC.
      Signed-off-by: 's avatarAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
      08b09816
  2. 01 Feb, 2017 23 commits
  3. 31 Jan, 2017 16 commits