Administrace komentářů

$ git clone git://git.gnome.org/gimp gimp

commit b7ae59e9a470fa6e7cfdade1613729c94c3e3a5e
Author: Nils Philippsen <nils@redhat.com>
Date:   Wed Dec 9 17:11:21 2009 +0100

    SGI: allocate memory more consistently

    Allocate memory for both pixels and rows in the same way to make the
    code easier understandable.

commit 4d9724f2f67bca4005ca50c22afccd7bf30cc2e8
Author: Simon Budig <simon@gimp.org>
Date:   Wed Dec 9 16:05:05 2009 +0100

    SGI: fix out of bounds writes

    The functions read_rle8() and read_rle16() didn't check if the addresses
    to which they wrote are in bounds when expanding runlength encoded data.

commit 838be627be38d3ff25fddf7af16f0c98ddf4cc04
Author: Nils Philippsen <nils@redhat.com>
Date:   Mon Dec 7 16:21:44 2009 +0100

    SGI: cast allocation calculations

    In order to avoid overflows when calculating needed memory, cast the
    first variable used into a large enough type so the whole calculation is
    done in that type.

commit daaf1d2b97c74271d9f8cc517f16b53d0089e094
Author: Nils Philippsen <nils@redhat.com>
Date:   Wed Dec 9 15:43:28 2009 +0100

    SGI: sanitize input data

    Refuse nonsensical xsize, ysize, zsize values.

commit 5aa82f3b6d55280012efc6973c799a46b2ad5d75
Author: Nils Philippsen <nils@redhat.com>
Date:   Tue Dec 8 17:44:54 2009 +0100

    PAT: sanitize input data

    Guard against bogus values of ph.width, ph.height and document why there
    are no allocation overflows.


commit b053021a2938d5967edfc966470bfac9257fc03a
Author: Nils Philippsen <nils@redhat.com>
Date:   Tue Dec 8 16:36:10 2009 +0100

    GBR: more input data sanitation

    Guard against bh.width or bh.height > GIMP_MAX_IMAGE_SIZE, only allow
    valid values of bh.bytes.

commit 869dcd7be1c1ec991256ba079f670574f1e57b90
Author: Nils Philippsen <nils@redhat.com>
Date:   Fri Dec 4 11:17:21 2009 +0100

    GBR: sanitize input data

    Guard against bogus zero width, height, bytes and allocation overflows.