Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-10-10 | libtiff: Prevent a buffer overflow in function ChopUpSingleUncompressedStrip. | stackexploit | |
The patch (https://codereview.chromium.org/2284063002) for Issue 618267 was insufficient. The integer overflow still could be triggered and could lead to heap buffer overflow. This CL strengthens integer overflow check in function _TIFFCheckRealloc. BUG=chromium:654169 R=ochang@chromium.org, tsepez@chromium.org, dsinclair@chromium.org Review-Url: https://codereview.chromium.org/2405693002 | |||
2016-08-29 | Fix for #618267. Adding a method to determine if multiplication has | tracy_jiang | |
overflow. BUG=618267 Review-Url: https://codereview.chromium.org/2284063002 | |||
2016-01-07 | XFA: Upgrade to libtiff 4.0.6. | Lei Zhang | |
R=jun_fang@foxitsoftware.com, tsepez@chromium.org Review URL: https://codereview.chromium.org/1563103002 . |