AlienCowEatCake / ImageViewer

Simple, cross-platform image viewer
GNU General Public License v3.0
32 stars 4 forks source link

fix vulnerability: Check length of all chunks except IDAT against user limit. #1

Closed logantillman closed 3 years ago

AlienCowEatCake commented 3 years ago

Hello! Thank you for taking care to fix the vulnerabilities. The pngpread.c and pngrutil.c files are part of a third-party OpenJPEG library and are not used in this project. I think that in this project it is necessary to minimize changes in third-party libraries to reduce the costs of updating them. You may consider creating a pull request to the OpenJPEG library.