Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-10-10 | libtiff: Prevent a buffer overflow in function ChopUpSingleUncompressedStrip. | stackexploit | |
The patch (https://codereview.chromium.org/2284063002) for Issue 618267 was insufficient. The integer overflow still could be triggered and could lead to heap buffer overflow. This CL strengthens integer overflow check in function _TIFFCheckRealloc. BUG=chromium:654169 R=ochang@chromium.org, tsepez@chromium.org, dsinclair@chromium.org Review-Url: https://codereview.chromium.org/2405693002 |