Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(256)

Issue 511453002: Prevent malformed ICO files from recursively decoding (Closed)

Created:
6 years, 3 months ago by djsollen
Modified:
6 years, 2 months ago
Reviewers:
scroggo, reed1
CC:
reviews_skia.org
Base URL:
https://skia.googlesource.com/skia.git@master
Project:
skia
Visibility:
Public.

Description

Prevent malformed ICO files from recursively decoding Committed: https://skia.googlesource.com/skia/+/6a9c7b1dbdd4cfa36a006a8c7cf2effd3ffe862e

Patch Set 1 #

Total comments: 2
Unified diffs Side-by-side diffs Delta from patch set Stats (+4 lines, -0 lines) Patch
M src/images/SkImageDecoder_libico.cpp View 1 chunk +4 lines, -0 lines 2 comments Download

Messages

Total messages: 8 (0 generated)
djsollen
djsollen@google.com changed reviewers: + reed@google.com, scroggo@google.com
6 years, 3 months ago (2014-08-26 17:04:45 UTC) #1
djsollen
6 years, 3 months ago (2014-08-26 17:04:45 UTC) #2
reed1
lgtm https://codereview.chromium.org/511453002/diff/1/src/images/SkImageDecoder_libico.cpp File src/images/SkImageDecoder_libico.cpp (right): https://codereview.chromium.org/511453002/diff/1/src/images/SkImageDecoder_libico.cpp#newcode167 src/images/SkImageDecoder_libico.cpp:167: // Disallow nesting ICO files within one another ...
6 years, 3 months ago (2014-08-26 17:53:34 UTC) #3
djsollen
On 2014/08/26 17:53:34, reed1 wrote: > lgtm > > https://codereview.chromium.org/511453002/diff/1/src/images/SkImageDecoder_libico.cpp > File src/images/SkImageDecoder_libico.cpp (right): > ...
6 years, 3 months ago (2014-08-26 17:55:02 UTC) #4
djsollen
The CQ bit was checked by djsollen@google.com
6 years, 3 months ago (2014-08-26 18:17:29 UTC) #5
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://skia-tree-status.appspot.com/cq/djsollen@google.com/511453002/1
6 years, 3 months ago (2014-08-26 18:18:23 UTC) #6
commit-bot: I haz the power
Committed patchset #1 (1) as 6a9c7b1dbdd4cfa36a006a8c7cf2effd3ffe862e
6 years, 3 months ago (2014-08-26 18:35:19 UTC) #7
scroggo
6 years, 2 months ago (2014-10-14 22:58:23 UTC) #8
Message was sent while issue was closed.
lgtm

https://codereview.chromium.org/511453002/diff/1/src/images/SkImageDecoder_li...
File src/images/SkImageDecoder_libico.cpp (right):

https://codereview.chromium.org/511453002/diff/1/src/images/SkImageDecoder_li...
src/images/SkImageDecoder_libico.cpp:168: if (otherDecoder->getFormat() ==
SkImageDecoder::kICO_Format) {
We could be more aggressive here; I think the only supported sub type is PNG.

Powered by Google App Engine
This is Rietveld 408576698