Google Git
Sign in
chromium / chromium / src / ee59b5e6cd8a5b31610291c1869c289ec6c13154
commitee59b5e6cd8a5b31610291c1869c289ec6c13154[log] [tgz]
authorNathan Zabriskie <nazabris@microsoft.com>Wed Jun 10 06:15:47 2020
committerCommit Bot <commit-bot@chromium.org>Wed Jun 10 06:15:47 2020
tree01146095662ae8f76674b690576cb5bfd0959e1d
parentd8c6c356b81f616ef170c744146d55c703e7cda2 [diff]
Fix potential bad address read in RasterDecoderImpl

ClusterFuzz found a potential bad address read in
RasterDecoderImpl::DoWritePixelsINTERNAL when |row_bytes| <
SkImageInfo::minRowBytes() for the image. This CL enforces that
minimum size on the client and service sides of the command.

Bug: 1087921
Change-Id: Id4e95adb7a1be9d9b5d0d6640b8b8780a580b7be
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2238847
Reviewed-by: Khushal <khushalsagar@chromium.org>
Commit-Queue: Nathan Zabriskie <nazabris@microsoft.com>
Cr-Commit-Position: refs/heads/master@{#776850}
2 files changed
tree: 01146095662ae8f76674b690576cb5bfd0959e1d
  1. android_webview/
  2. apps/
  3. ash/
  4. base/
  5. build/
  6. build_overrides/
  7. buildtools/
  8. cc/
  9. chrome/
  10. chromecast/
  11. chromeos/
  12. cloud_print/
  13. components/
  14. content/
  15. courgette/
  16. crypto/
  17. dbus/
  18. device/
  19. docs/
  20. extensions/
  21. fuchsia/
  22. gin/
  23. google_apis/
  24. google_update/
  25. gpu/
  26. headless/
  27. infra/
  28. ios/
  29. ipc/
  30. jingle/
  31. media/
  32. mojo/
  33. native_client_sdk/
  34. net/
  35. pdf/
  36. ppapi/
  37. printing/
  38. remoting/
  39. rlz/
  40. sandbox/
  41. services/
  42. skia/
  43. sql/
  44. storage/
  45. styleguide/
  46. testing/
  47. third_party/
  48. tools/
  49. ui/
  50. url/
  51. weblayer/
  52. .clang-format
  53. .clang-tidy
  54. .eslintrc.js
  55. .git-blame-ignore-revs
  56. .gitattributes
  57. .gitignore
  58. .gn
  59. .vpython
  60. .vpython3
  61. .yapfignore
  62. AUTHORS
  63. BUILD.gn
  64. CODE_OF_CONDUCT.md
  65. codereview.settings
  66. DEPS
  67. ENG_REVIEW_OWNERS
  68. LICENSE
  69. LICENSE.chromium_os
  70. OWNERS
  71. PRESUBMIT.py
  72. PRESUBMIT_test.py
  73. PRESUBMIT_test_mocks.py
  74. README.md
  75. WATCHLISTS
README.md

Logo Chromium

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

The project's web site is https://www.chromium.org.

Documentation in the source is rooted in docs/README.md.

Learn how to Get Around the Chromium Source Code Directory Structure .

For historical reasons, there are some small top level directories. Now the guidance is that new top level directories are for product (e.g. Chrome, Android WebView, Ash). Even if these products have multiple executables, the code should be in subdirectories of the product.