1. 25 Sep, 2015 8 commits
  2. 24 Sep, 2015 8 commits
  3. 23 Sep, 2015 17 commits
  4. 22 Sep, 2015 6 commits
  5. 21 Sep, 2015 1 commit
    • Nathan Otterness's avatar
      image/png: integer underflow when decoding · 66c25fa9
      Nathan Otterness authored
      This change addresses an integer underflow appearing only on systems
      using a 32-bit int type. The patch addresses the problem by limiting the
      length of unknown chunks to 0x7fffffff. This value appears to already be
      checked for when parsing other chunk types, so the bug shouldn't appear
      elsewhere in the package. The PNG spec recommends the maximum size for
      any chunk to remain under 2^31, so this shouldn't cause errors with
      valid images.
      
      Fixes #12687
      
      Change-Id: I17f0e1683515532c661cf2b0b2bc65309d1b7bb7
      Reviewed-on: https://go-review.googlesource.com/14766Reviewed-by: default avatarNigel Tao <nigeltao@golang.org>
      66c25fa9