Author: dynis
Date: Sat Jan 17 17:46:27 2009
New Revision: 6122
URL: http://source.netsurf-browser.org?rev=6122&view=rev
Log:
Disallow a 0 value in the 'bits per pixel' field of a Windows 2.x header. Kudos
to Joonas Pihlaja.
Modified:
trunk/libnsbmp/libnsbmp.c
Modified: trunk/libnsbmp/libnsbmp.c
URL:
http://source.netsurf-browser.org/trunk/libnsbmp/libnsbmp.c?rev=6122&r1=6121&r2=6122&view=diff
==============================================================================
--- trunk/libnsbmp/libnsbmp.c (original)
+++ trunk/libnsbmp/libnsbmp.c Sat Jan 17 17:46:27 2009
@@ -367,6 +367,8 @@
if (read_uint16(data, 8) != 1)
return BMP_DATA_ERROR;
bmp->bpp = read_uint16(data, 10);
+ if (bmp->bpp == 0)
+ return BMP_DATA_ERROR;
bmp->colours = (1 << bmp->bpp);
palette_size = 3;
} else if (header_size < 40) {
_______________________________________________
netsurf-commits mailing list
[email protected]
http://vlists.pepperfish.net/cgi-bin/mailman/listinfo/netsurf-commits-netsurf-browser.org
