1
0
Fork 0
mirror of https://github.com/juce-framework/JUCE.git synced 2026-01-10 23:44:24 +00:00
JUCE/modules
reuk 0223e44ae7
Image: Keep track of contiguous buffer size to avoid heap buffer overflows
In CoreGraphicsPixelData::createImage, image data was copied from a
BitmapData created from the Image passed into the function.

The BitmapData instance didn't keep track of the size of the buffer it
pointed to, so the buffer size was computed by multiplying the
BitmapData height by its line stride. However, if the BitmapData pointed
to a subsection of an image, the `data` pointer might be offset from
the allocated region, and `data + lineStride * height` would point past
the end of the allocated region. Trying to read/copy this range would
cause a heap buffer overflow at the end of the range.

This change adjusts BitmapData so that it keeps track of the size of the
allocated region. Taking a subsection of an image should subtract the
data pointer offset from the size of the allocated region.
2022-02-23 10:56:09 +00:00
..
juce_analytics Bump version number to 6.1.5 2022-01-26 13:00:05 +00:00
juce_audio_basics MidiFile: Fix typo 2022-02-18 16:43:25 +00:00
juce_audio_devices CoreAudio: Ensure devices are restarted correctly after changing sample rate 2022-02-17 16:04:58 +00:00
juce_audio_formats WavAudioFormat: Disambiguate ISRC and source information 2022-02-18 16:43:26 +00:00
juce_audio_plugin_client Image: Keep track of contiguous buffer size to avoid heap buffer overflows 2022-02-23 10:56:09 +00:00
juce_audio_processors VST3: Fix leak when setting/getting state via extensions mechanism 2022-02-18 16:43:27 +00:00
juce_audio_utils Bump version number to 6.1.5 2022-01-26 13:00:05 +00:00
juce_box2d Bump version number to 6.1.5 2022-01-26 13:00:05 +00:00
juce_core Windows: Fix non-C++14-compatible noexcept usage in mapi.h 2022-02-17 16:04:58 +00:00
juce_cryptography Bump version number to 6.1.5 2022-01-26 13:00:05 +00:00
juce_data_structures Bump version number to 6.1.5 2022-01-26 13:00:05 +00:00
juce_dsp ProcessContextNonReplacing: Fix typo 2022-02-18 16:43:24 +00:00
juce_events AsyncUpdater: Cancel updates in derived class destructors 2022-02-18 16:43:25 +00:00
juce_graphics Image: Keep track of contiguous buffer size to avoid heap buffer overflows 2022-02-23 10:56:09 +00:00
juce_gui_basics Image: Keep track of contiguous buffer size to avoid heap buffer overflows 2022-02-23 10:56:09 +00:00
juce_gui_extra NSViewFrameWatcher: Extract from NSViewComponent implementation 2022-02-18 16:43:25 +00:00
juce_opengl Image: Keep track of contiguous buffer size to avoid heap buffer overflows 2022-02-23 10:56:09 +00:00
juce_osc Bump version number to 6.1.5 2022-01-26 13:00:05 +00:00
juce_product_unlocking Bump version number to 6.1.5 2022-01-26 13:00:05 +00:00
juce_video Bump version number to 6.1.5 2022-01-26 13:00:05 +00:00
CMakeLists.txt BLOCKS: Remove juce_blocks_basics module 2021-05-19 16:53:01 +01:00