Files
Nick Waterton d5e19d20fa Fix buffer size truncation for non-8-aligned image dimensions (#561)
Integer division (w*h)/8 truncates when w*h is not a multiple of 8,
allocating one byte too few. spr2color then writes past the end of
the buffer, corrupting the heap. Use (w*h+7)/8 to round up correctly.

Triggered by any tag whose width*height is not divisible by 8.
2026-03-13 11:35:17 -07:00
..
2025-11-16 22:04:44 +01:00
2026-03-06 10:44:23 -08:00
2024-03-18 22:09:05 +01:00
2025-03-22 23:28:53 +01:00
2023-03-23 09:51:50 +01:00
2023-03-23 09:51:50 +01:00
2023-03-23 09:51:50 +01:00
2023-03-23 09:51:50 +01:00
2023-03-23 09:51:50 +01:00
2023-06-20 17:51:10 +02:00