Ticket UUID: | 121786c0de7559f226d8bc7377b3e742578e571a | |||
Title: | image svg upstream out of bound read nanosvg#262 | |||
Type: | Bug | Version: | main | |
Submitter: | oehhar | Created on: | 2024-12-19 21:59:18 | |
Subsystem: | 41. Photo Images | Assigned To: | oehhar | |
Priority: | 5 Medium | Severity: | Minor | |
Status: | Closed | Last Modified: | 2024-12-22 13:30:03 | |
Resolution: | Fixed | Closed By: | jan.nijtmans | |
Closed on: | 2024-12-22 13:30:03 | |||
Description: |
There is a bugfix in nanosvg for an out of bound read for hostile svg data. | |||
User Comments: |
jan.nijtmans added on 2024-12-22 13:30:03:
Fix committed now to [a64fbcd2fc13101c|8.7] and [c4f6d582da5b0f0c|9.0] oehhar added on 2024-12-19 22:09:53: Put into a branch by commit [f284f330] in branch [121786c0-nanosvg-262]. IMHO, this is "mostly harmless" and could go into the current release. But if not, it is ok too. Thanks for all, Harald |
