[Webkit-unassigned] [Bug 15909] New: Public GIF image decoder can (still) corrupt memory on malformed GIFs

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=15909

           Summary: Public GIF image decoder can (still) corrupt memory on
                    malformed GIFs
           Product: WebKit
           Version: 525+ (Nightly build)
          Platform: PC
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Images
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: zerodpx at gmail.com


Follow-on bug to bug 15778.

My original patch had an oversight; I didn't catch the case where an image had
an excessively large frame with a nonzero Y-offset, which could still have
caused a fault.

Simple patch coming shortly.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.