Skip to content

gif: Fix LZW decoder accepting invalid LZW code.

Robert Ancell requested to merge robert.ancell/gdk-pixbuf:lzw-loop into master

The code value after a reset wasn't being validated, which means we would accept invalid codes. This could cause an infinite loop in the decoder.

Fixes CVE-2020-29385

Fixes #164 (closed)

Merge request reports

Loading