id summary reporter owner description type status priority milestone component version severity resolution keywords cc 7328 giflib-5.1.2 Fernando de Oliveira Fernando de Oliveira "[http://downloads.sourceforge.net/giflib/giflib-5.1.2.tar.bz2] [http://sourceforge.net/p/giflib/code/ci/master/tree/NEWS] or [http://sourceforge.net/p/giflib/code/ci/master/tree/NEWS?format=raw] {{{ GIFLIB NEWS Version 5.1.2 ============= Code Fixes ---------- • Code hardening using reallocarray() from OpenBSD. • Sanity check in giffilter catches files with malformed extension records Fixes SourceForge bug #63: malformed gif causes segfault in giffilter. • Inexpensive sanity check in DGifSlurp() catches malformed files with no image descriptor. Fixes SourceForge bug #64: malformed gif causes crash in giftool. • Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying constant input parameter. • Bail out of GIF read on invalid pixel width. Addresses Savannah bug #67: invalid shift in dgif_lib.c • Fix SourceForge bug #69: #69 Malformed: Gif file with no extension block after a GRAPHICS_EXT_FUNC_CODE extension causes segfault (in giftext). • Fix SourceForge bug #71: Buffer overwrite when giffixing a malformed gif. • Fix SourceForge bug #73: Null pointer deference in gifclrmap (only reachable with malformed GIF). • Fix SourceForge bug #74: Double free in gifsponge under 5.1,1, for any valid gif image. • Fix SourceForge bug #75: GAGetArgs overflows due to uncounted use of va_arg. • Sanity check in giffix catches some malformed files. Addresses SourceForge bug #77: dgif_lib.c: extension processing error }}}" enhancement closed normal 7.9 BOOK SVN normal fixed