Diego Biurrun d34a133b78 dfa: Disallow odd width/height and add proper bounds check for DDS1 chunks ...

DDS1 chunks are decoded in 2x2 blocks, odd chunk width or height is not
allowed in that case. Also ensure that the decode buffer is big enough
for all blocks being processed.

Bug-Id: CVE-2017-9992
CC: libav-stable@libav.org

2017-08-13 19:58:40 +02:00

13 KiB

Raw Blame History

View Raw