Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ConvertToSinglePlane memory overrwrite bug fix #307

Merged
merged 5 commits into from Jan 26, 2023
Merged

Conversation

walbourn
Copy link
Member

@walbourn walbourn commented Jan 25, 2023

ConvertToSinglePlane did not validate that the input images meet the height alignment requirements for the source format. This can result in a memory overwrite if untrusted content is passed from the DDS loader directly to this function.

This PR also includes additional hardening for the DDS loader, ComputePitch, and DDSTextureLoader modules to validate width & height requirements for planar video textures.

@walbourn walbourn self-assigned this Jan 25, 2023
@walbourn walbourn merged commit 278e708 into main Jan 26, 2023
@walbourn walbourn deleted the videoheightalignfix branch January 26, 2023 07:25
@walbourn walbourn added the bug label Jan 26, 2023
@Flugan
Copy link

Flugan commented Apr 18, 2023

ConvertToSInglePlane bug

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants