From bdd3acbd48a575d418ba6bf1b32d7bda2fae1c81 Mon Sep 17 00:00:00 2001 From: Robert Ancell Date: Mon, 30 Nov 2020 12:26:12 +1300 Subject: gif: Fix LZW decoder accepting invalid LZW code. The code value after a reset wasn't being validated, which means we would accept invalid codes. This could cause an infinite loop in the decoder. Fixes CVE-2020-29385 Fixes https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/164 --- tests/test-images/fail/hang_114.gif | Bin 0 -> 5561 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 tests/test-images/fail/hang_114.gif (limited to 'tests') diff --git a/tests/test-images/fail/hang_114.gif b/tests/test-images/fail/hang_114.gif new file mode 100644 index 000000000..4d7d252cb Binary files /dev/null and b/tests/test-images/fail/hang_114.gif differ -- cgit v1.2.1