Tree - rpms/SDL_image - src.fedoraproject.org

Blob History Raw

		1565df6	`--- trunk/SDL_image/IMG_gif.c 2007/12/28 08:17:23 3461`
		1565df6	`+++ trunk/SDL_image/IMG_gif.c 2007/12/28 16:43:56 3462`
		1565df6	`@@ -418,6 +418,10 @@`
		1565df6	`static int stack[(1 << (MAX_LWZ_BITS)) * 2], *sp;`
		1565df6	`register int i;`
		1565df6
		1565df6	`+ /* Fixed buffer overflow found by Michael Skladnikiewicz */`
		1565df6	`+ if (input_code_size > MAX_LWZ_BITS)`
		1565df6	`+ return -1;`
		1565df6	`+`
		1565df6	`if (flag) {`
		1565df6	`set_code_size = input_code_size;`
		1565df6	`code_size = set_code_size + 1;`