Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 2838bec4 authored by Ram Mohan's avatar Ram Mohan Committed by Dichen Zhang
Browse files

ultrahdr: decompress image writes outside bounds for non aligned widths

jpeg_read_raw_data() returns one MCU row per call, and thus one must
pass buffer of at least max_v_samp_factor * DCTSIZE scanlines. The
buffer must be large enough to hold the actual data plus padding
to DCT-block boundaries.

Bug: 283500706
Test: ./ultrahdr_enc_fuzzer

Change-Id: Icb7c7e3eda590efc05d5945e7c906c1e4a012eab
parent 1dd15d0d
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment