Gimp/app
Massimo Valentini 31a6796fa8 Bug 788870 - Abr corrupted files crashing GIMP when saved...
...in brushes user directory

Consider 8bim section size unsigned, to avoid seeking backward when a
malicious brush includes an 8bim section unknown to GIMP.

This avoids the possibility to start an infinite loop on GIMP start.

Found just a water drop in the ocean, GIMP is still not secure.

Mitch: Added more sanity checks on the Abr's width/height/bytes so now
all brushes in the zip attached to the bug are properly rejected
instead of crashing GIMP.
2018-01-02 13:04:12 +01:00
..
actions app: various GimpDashboard improvements 2017-12-30 13:57:31 -05:00
config app, configure: adding dependency to mypaint-brushes. 2018-01-01 22:33:56 +01:00
core Bug 788870 - Abr corrupted files crashing GIMP when saved... 2018-01-02 13:04:12 +01:00
dialogs Bug 788423 - Fade left-right opacity slider doesn't work: value changes to 1.0 2018-01-01 17:57:46 +01:00
display app: don't upscale preallocated display buffers by GIMP_DISPLAY_RENDER_MAX_SCALE 2017-12-31 11:57:22 -05:00
file Bug 788403 - When importing an image, don't change to "untitled"... 2017-11-19 19:21:15 +01:00
gegl app: restore operation src node in gimp_gegl_apply_[cached_]operation() 2017-12-05 16:12:07 -05:00
gui app: get rid of GParameter and g_object_newv() (deprecated in GLib 2.54) 2018-01-01 15:20:05 +01:00
menus app, menus, icons: add dashboard dockable 2017-12-18 19:42:23 -05:00
operations app: misc performance improvements to GimpOperationComposeCrop 2017-12-26 09:19:46 -05:00
paint app: fix a typo (realtive) 2017-12-23 00:13:18 +01:00
pdb pdb: (try 3) move PDB generation and sources to toplevel/pdb 2017-12-17 14:16:08 -05:00
plug-in */Makefile.am: add abbreviations to generated enum files 2017-11-30 03:10:14 -05:00
propgui app: in propgui, use flat color buttons for rgb props with no alpha 2017-11-02 16:12:33 -04:00
tests app: bump GIMP_UI_WINDOW_POSITION_EPSILON in test-ui.c 2017-11-13 17:19:05 -05:00
text */Makefile.am: add abbreviations to generated enum files 2017-11-30 03:10:14 -05:00
tools Bug 787321 - Editing shear tool values numerically can have no effect 2018-01-01 18:22:34 +01:00
vectors app: use a lot of g_clear_object() and g_clear_pointer() 2017-07-15 18:42:44 +02:00
widgets app: small cleanup in GimpDashboard 2017-12-31 10:47:10 -05:00
xcf 790783 - buffer overread in XCF parser if version field... 2017-11-27 00:49:05 +01:00
.gitignore
about.h
app.c pdb: (try 3) move PDB generation and sources to toplevel/pdb 2017-12-17 14:16:08 -05:00
app.h
errors.c
errors.h
gimp-debug.c
gimp-debug.h
gimp-intl.h
gimp-log.c app: add back helper features to output possible flags for GIMP_DEBUG. 2017-12-23 20:41:55 +01:00
gimp-log.h app: turn magic matching debug output into GIMP_LOG() 2017-07-28 22:35:13 +02:00
gimp-priorities.h
gimpcore.def
language.c
language.h
main.c app: split sanity check into early/late stages, to fix gegl translation 2017-06-15 09:51:25 -04:00
Makefile.am app: fix git-version.h when building linked working tree 2017-12-06 04:50:02 -05:00
sanity.c configure.ac: require glib >= 2.54.2 2018-01-01 14:49:03 +01:00
sanity.h app: split sanity check into early/late stages, to fix gegl translation 2017-06-15 09:51:25 -04:00
signals.c
signals.h
tests.c
tests.h
unique.c
unique.h
version.c app: add compiler info in gimp -v. 2017-09-10 01:21:55 +02:00
version.h