diff options
author | Michael Drake <tlsa@netsurf-browser.org> | 2022-04-15 16:41:19 +0100 |
---|---|---|
committer | Michael Drake <tlsa@netsurf-browser.org> | 2022-04-15 16:41:19 +0100 |
commit | 75ed38539447571ec961c985c8a1e9cbd76573e2 (patch) | |
tree | ad7b58b794924ff63dfa57238bc7e383545ea412 | |
parent | aa6e2af43ebb898167f6dc0bb8215eacf0a17389 (diff) | |
download | libnsgif-75ed38539447571ec961c985c8a1e9cbd76573e2.tar.gz libnsgif-75ed38539447571ec961c985c8a1e9cbd76573e2.tar.bz2 |
GIF: Ensure frame clipping is applied to max lzw output length.
-rw-r--r-- | src/gif.c | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -525,7 +525,7 @@ static nsgif_error nsgif__decode_simple( uint32_t *restrict frame_data, uint32_t *restrict colour_table) { - uint32_t pixels = gif->info.width * height; + uint32_t pixels; uint32_t written = 0; nsgif_error ret = NSGIF_OK; lzw_result res; @@ -550,6 +550,7 @@ static nsgif_error nsgif__decode_simple( } frame_data += (offset_y * gif->info.width); + pixels = gif->info.width * height; while (pixels > 0) { res = lzw_decode_map(gif->lzw_ctx, |