Avoid huffman tree buffer overrun in huffman_import_tree_rle

rtissera / libchdr

Standalone library for reading MAME's CHDv1-v5 formats.

BSD 3-Clause "New" or "Revised" License

98 stars 42 forks source link

Avoid huffman tree buffer overrun in huffman_import_tree_rle #91

Closed flyinghead closed 1 year ago

flyinghead commented 1 year ago

I was able to easily trigger a heap corruption on Windows by forcing repcount to the max value. This can happen with corrupted CHDs and it is very similar to a number of crash reports i received.

Issue #90

rtissera commented 1 year ago

Great catch, let's merge.