| commit | 0bc4f2ff03be275874ef56b7cce8092357a75fc9 | [log] [tgz] |
|---|---|---|
| author | Tom Taylor <tomtaylor@google.com> | Wed Nov 30 14:24:41 2016 -0800 |
| committer | Tom Taylor <tomtaylor@google.com> | Wed Nov 30 14:24:41 2016 -0800 |
| tree | bf7697ed244e5c96e675658300fb9a83d4b3af3d | |
| parent | 70e0cbfe485f94bf8d9f5f0c17cdb6dab4a0bfc4 [diff] |
32322450 Security Vulnerability - heap buffer overflow in libgiftranscode.so * No range checking was done on the background color index. Add range checking and bail if the color index is out of range. Test: Manual - tested sending the gif attached in the bug. - tested sending a 3.5mb gif to verify the gif transcoding was taking place. - tested on arm64, arm, and x86 devices. Change-Id: I0fd2141436e506a3dc2da04c8ede4701e2a57d19