- 03 3月, 2017 1 次提交
-
-
由 Jeremy Sawicki 提交于
-
- 16 1月, 2017 4 次提交
-
-
由 themanagainstthetank 提交于
int raw_data[4] to 0, or the compiler bugs
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
- 16 12月, 2016 1 次提交
-
-
由 sammyhw 提交于
-
- 04 12月, 2016 4 次提交
-
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
- 29 11月, 2016 4 次提交
-
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 jon 提交于
-
由 jon 提交于
-
- 22 10月, 2016 4 次提交
-
-
由 Fabian Giesen 提交于
stbi__process_frame_header had two bugs when dealing with progressive JPEGs: 1. when malloc failed allocating raw_data, previous components' raw_coeff didn't get freed 2. no out-of-memory check in raw_coeff allocation Fix both and share a bit more cleanup code in general.
-
由 Fabian Giesen 提交于
Runs need to be bounds checked. Fixes issues #315, #317.
-
由 Fabian Giesen 提交于
Adds some helpers that check whether a product of multiple factors (that need to be non-negative: this is enforced) summed with another non-negative value overflows when performed as int. Since stb_image mostly works in ints, this seems like the safest route. Limits size of images to 2GB but several of the decoders already enforce this limit (or even lower ones). Also adds wrappers for malloc that combine a mul-add-with- overflow-check with the actual malloc, and return NULL on failure. Then use them when allocating something that is the product of multiple factors. For image formats, also add a top-level "is this too big?" check that gives a more useful error message; otherwise, the failed mallocs result in an "out of memory" error. The idea is that the top-level checks should be the primary way to catch these bugs (and produce a useful error message). But a misleading error message is still vastly preferable to a buffer overflow exploit. Fixes issues #310, #313, #314, #318. (Verified with the provided test images) Along the way, this fixes a previously unnoticed bug in ldr_to_hdr / hdr_to_ldr (missing NULL check); these functions are called with the result of an image decoder, so NULLs can definitely happen. Another bug noticed along the way is that handling of interlaced 16-bit PNGs was incorrect. Fixing this (along with the previous modifications) fixes issue #311. Yet another bug noticed during this change is that reduce_png did not check the right pointer during its out of memory check. Fix that too.
-
由 Fabian Giesen 提交于
Fixes issue #312.
-
- 02 4月, 2016 6 次提交
-
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
- 27 3月, 2016 1 次提交
-
-
由 Sean Barrett 提交于
-
- 11 3月, 2016 1 次提交
-
-
由 Matthew Gregan 提交于
-
- 03 3月, 2016 2 次提交
-
-
由 Thatcher Ulrich 提交于
-
由 Thatcher Ulrich 提交于
-
- 26 2月, 2016 1 次提交
-
-
由 Craig Donner 提交于
Slightly modify the public domain license to keep it in the public domain, but make it clear that even when dedications might not be recognized that the code is still usable. Given that this isn't dual-licensing under a different license, I'm hoping this will be acceptable.
-
- 11 2月, 2016 1 次提交
-
-
由 Craig Donner 提交于
Slightly modify the public domain license to keep it in the public domain, but make it clear that even when dedications might not be recognized that the code is still usable. Given that this isn't dual-licensing under a different license, I'm hoping this will be acceptable.
-
- 23 1月, 2016 1 次提交
-
-
由 Socks the Fox 提交于
-
- 22 1月, 2016 1 次提交
-
-
由 Sean Barrett 提交于
-
- 17 1月, 2016 7 次提交
-
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
由 Sean Barrett 提交于
-
- 14 1月, 2016 1 次提交
-
-
由 Romain Bailly 提交于
-