Samsung / rlottie

A platform independent standalone library that plays Lottie Animation.
Other
1.15k stars 223 forks source link

Fix null dereference and buffer overflow #536

Open CreativeNameHUH opened 1 year ago

CreativeNameHUH commented 1 year ago

Added null checks for stbijpeg pointers in stbijpeg_load and stbi__jpeg_test functions.

Added 17th element to stbijbias array in function stbiextend_recive parameter n could be 16 causing a buffer overflow on return k + (stbi__jbias[n] & sgn)

hermet commented 1 year ago

Nobody can't access svace outside of samsung :)

CreativeNameHUH commented 1 year ago

Nobody can't access svace outside of samsung :)

Thank you, I've updated the description and the title :)