{"schema":"libjg2-1", "vpath":"/git/", "avatar":"/git/avatar/", "alang":"", "gen_ut":1758569046, "reponame":"libwebsockets", "desc":"libwebsockets lightweight C networking library", "owner": { "name": "Andy Green", "email": "andy@warmcat.com", "md5": "c50933ca2aa61e0fe2c43d46bb6b59cb" },"url":"https://libwebsockets.org/repo/libwebsockets", "f":3, "items": [ {"schema":"libjg2-1", "cid":"010f1fdea5f6ba2e14bd75d8465cbc09", "commit": {"type":"commit", "time": 1715262213, "time_ofs": 60, "oid_tree": { "oid": "aafbcd1c54268bdcf7ac12ffd361fc7e89f89088", "alias": []}, "oid":{ "oid": "72187434722a401c59799e311f52a0e232334e38", "alias": []}, "msg": "upng: check ims limits", "sig_commit": { "git_time": { "time": 1715262213, "offset": 60 }, "name": "Andy Green", "email": "andy@warmcat.com", "md5": "c50933ca2aa61e0fe2c43d46bb6b59cb" }, "sig_author": { "git_time": { "time": 1715262187, "offset": 60 }, "name": "iwashiira", "email": "89283357+iwashiira@users.noreply.github.com", "md5": "85ee85263106a002493da27603e64d69" }}, "body": "upng: check ims limits\n" , "diff": "diff --git a/lib/misc/upng.c b/lib/misc/upng.c\nindex d89786d..d62aee1 100644\n--- a/lib/misc/upng.c\n+++ b/lib/misc/upng.c\n@@ -484,6 +484,12 @@ lws_upng_decode(lws_upng_t* u, const uint8_t **_pos, size_t *_size)\n \t\t\tif (!u-\u003einf.out) {\n \t\t\t\tsize_t ims \u003d (u-\u003eu.bypl * 2) + u-\u003einf.info_size;\n \n+\t\t\t\tif (u-\u003einf.info_size \u003e ims) {\n+\t\t\t\t\tlwsl_err(\u0022%s: integer overflow occur in ims %llu\u0022,\n+\t\t\t\t\t\t __func__, (unsigned long long)ims);\n+\t\t\t\t\treturn LWS_SRET_FATAL + 27;\n+\t\t\t\t}\n+\n \t\t\t\tif (u-\u003ehold_at_metadata)\n \t\t\t\t\treturn LWS_SRET_AWAIT_RETRY;\n \n","s":{"c":1758569046,"u": 2296}} ],"g": 3578,"chitpc": 0,"ehitpc": 0,"indexed":0 , "ab": 0, "si": 0, "db":0, "di":0, "sat":0, "lfc": "0000"}