Tk Source Code

View Ticket
Login
Ticket UUID: 121786c0de7559f226d8bc7377b3e742578e571a
Title: image svg upstream out of bound read nanosvg#262
Type: Bug Version: main
Submitter: oehhar Created on: 2024-12-19 21:59:18
Subsystem: 41. Photo Images Assigned To: oehhar
Priority: 5 Medium Severity: Minor
Status: Closed Last Modified: 2024-12-22 13:30:03
Resolution: Fixed Closed By: jan.nijtmans
    Closed on: 2024-12-22 13:30:03
Description:

There is a bugfix in nanosvg for an out of bound read for hostile svg data.

https://github.com/memononen/nanosvg/pull/262

User Comments: jan.nijtmans added on 2024-12-22 13:30:03:

Fix committed now to [a64fbcd2fc13101c|8.7] and [c4f6d582da5b0f0c|9.0]


oehhar added on 2024-12-19 22:09:53:

Put into a branch by commit [f284f330] in branch [121786c0-nanosvg-262].

IMHO, this is "mostly harmless" and could go into the current release. But if not, it is ok too.

Thanks for all, Harald