Leahnaya/SDL
1
0
Fork 0
mirror of https://github.com/yawut/SDL.git synced 2026-07-10 13:44:44 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity
c5566ee088
SDL/src
History
Sam Lantinga c5566ee088 Fixed bug 4500 - Heap-Buffer Overflow in Map1toN pertaining to SDL_pixels.c 
Petr Pisar

The reproducer has these data in BITMAPINFOHEADER:

biSize = 40
biBitCount = 8
biClrUsed = 131075

SDL_LoadBMP_RW() function passes biBitCount as a color depth to SDL_CreateRGBSurface(), thus 256-color pallete is allocated. But then biClrUsed colors are read from a file and stored into the palette. SDL_LoadBMP_RW should report an error if biClrUsed is greater than 2^biBitCount.
2019-02-18 07:50:33 -08:00
..
atomic Updated copyright for 2019 2019-01-04 22:01:14 -08:00
audio Android/openslES: fix warnings, comment out un-used interface 2019-02-05 15:14:15 +01:00
core Android: some typos 2019-01-20 22:17:41 +01:00
cpuinfo Updated copyright for 2019 2019-01-04 22:01:14 -08:00
dynapi Updated copyright for 2019 2019-01-04 22:01:14 -08:00
events Updated copyright for 2019 2019-01-04 22:01:14 -08:00
file Updated copyright for 2019 2019-01-04 22:01:14 -08:00
filesystem Updated copyright for 2019 2019-01-04 22:01:14 -08:00
haptic Updated copyright for 2019 2019-01-04 22:01:14 -08:00
hidapi Don't build SDL_JOYSTICK_HIDAPI by default on iOS 2018-10-26 09:27:31 -07:00
joystick iOS/tvOS: fix support for SDL_GameControllerGetButton(controller, GUIDE) with MFi controllers (thanks Caleb!) 2019-01-31 19:52:47 -04:00
libm Updated copyright for 2019 2019-01-04 22:01:14 -08:00
loadso Updated copyright for 2019 2019-01-04 22:01:14 -08:00
main Updated copyright for 2019 2019-01-04 22:01:14 -08:00
power Updated copyright for 2019 2019-01-04 22:01:14 -08:00
render opengles2: patched to compile. 2019-02-04 23:35:18 -05:00
sensor Updated copyright for 2019 2019-01-04 22:01:14 -08:00
stdlib Updated copyright for 2019 2019-01-04 22:01:14 -08:00
test Updated copyright for 2019 2019-01-04 22:01:14 -08:00
thread Updated copyright for 2019 2019-01-04 22:01:14 -08:00
timer Updated copyright for 2019 2019-01-04 22:01:14 -08:00
video Fixed bug 4500 - Heap-Buffer Overflow in Map1toN pertaining to SDL_pixels.c 2019-02-18 07:50:33 -08:00
SDL_assert_c.h Updated copyright for 2019 2019-01-04 22:01:14 -08:00
SDL_assert.c Emscripten: use UTF8ToString instead of Pointer_stringify 2019-01-29 12:19:03 +00:00
SDL_dataqueue.c Updated copyright for 2019 2019-01-04 22:01:14 -08:00
SDL_dataqueue.h Updated copyright for 2019 2019-01-04 22:01:14 -08:00
SDL_error_c.h Updated copyright for 2019 2019-01-04 22:01:14 -08:00
SDL_error.c Updated copyright for 2019 2019-01-04 22:01:14 -08:00
SDL_hints.c Updated copyright for 2019 2019-01-04 22:01:14 -08:00
SDL_internal.h Updated copyright for 2019 2019-01-04 22:01:14 -08:00
SDL_log.c Updated copyright for 2019 2019-01-04 22:01:14 -08:00
SDL.c Updated copyright for 2019 2019-01-04 22:01:14 -08:00