Gabriele Barbero 691785113a plug-ins: validate fcTL frame dimensions... ... ...against IHDR bounds in APNG loader The pixel buffer is allocated using base image dimensions from the IHDR chunk, but row write offsets were computed using the per-frame dimensions from the fcTL chunk with no bounds check. A crafted APNG file with fcTL.width > IHDR.width or fcTL.height > IHDR.height would cause out-of-bounds writes into the heap on every row after row 0. Reject fcTL frames whose dimensions or offsets extend beyond the base image dimensions before proceeding with decoding.		2026-04-08 11:47:05 +02:00
..
common	plug-ins: validate fcTL frame dimensions...	2026-04-08 11:47:05 +02:00
file-bmp	plug-ins: Use fopen_s on Windows to fix CRT_INSECURE_DEPRECATE warns	2026-04-01 07:16:32 -03:00
file-dds	app, lib*, plug-ins: Use sscanf_s on Windows to fix CRT_INSECURE_DEPRECATE warns	2026-03-30 22:31:57 -03:00
file-exr	plug-ins: Include <memory> when on MSVC	2026-04-03 08:29:52 -03:00
file-faxg3	plug-ins: get rid of various gimp_quit().	2026-04-07 18:22:43 +02:00
file-fits	plug-ins: Protect against too-large FITS images	2026-03-19 12:05:47 +00:00
file-fli	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-icns	app, libgimp*, plug-ins: Use strncpy_s on Windows to fix CRT_INSECURE_DEPRECATE	2026-03-31 13:31:33 -03:00
file-ico	app, plug-ins: Use strcpy_s on Windows to fix CRT_INSECURE_DEPRECATE warnings	2026-03-30 22:32:01 -03:00
file-jpeg	file-jpeg: fix loading of photoshop path split across multiple segments	2026-03-12 15:08:39 +01:00
file-psd	plug-ins: remove all gimp_quit() calls from PSD export code.	2026-04-07 18:22:43 +02:00
file-raw	app, lib*, plug-ins: Use sscanf_s on Windows to fix CRT_INSECURE_DEPRECATE warns	2026-03-30 22:31:57 -03:00
file-sgi	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
file-tiff	plug-ins: Cast g_string_append_c argument to gchar on file-tiff	2026-03-30 16:09:13 -03:00
file-webp	plug-ins: Use _fileno on Windows	2026-04-03 11:09:54 -03:00
filter-browser	plug-ins: improve describing enum and choice arguments.	2026-03-06 22:49:14 +01:00
flame	app, plug-ins: Comment unused stuff on macOS	2026-03-29 17:19:42 -03:00
fractal-explorer	app, plug-ins: More sscanf_s on Windows	2026-03-31 21:44:51 -03:00
gfig	app, plug-ins: More sscanf_s on Windows	2026-03-31 21:44:51 -03:00
gimpressionist	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
gradient-flare	plug-ins: Use fscanf_s on Windows to fix CRT_INSECURE_DEPRECATE warnings	2026-03-31 13:31:33 -03:00
help	app, libgimp, libgimpbase, libgimpwidgets, plug-ins: Add macro to unused code	2026-03-29 17:19:42 -03:00
help-browser	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
ifs-compose	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
imagemap	plug-ins: Forgot a macro	2026-03-31 18:58:47 -03:00
lighting	plug-ins: Use fscanf_s on Windows to fix CRT_INSECURE_DEPRECATE warnings	2026-03-31 13:31:33 -03:00
map-object	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
metadata	app, libgimp*, plug-ins: Use strtok_s on Windows to fix CRT_INSECURE_DEPRECATE	2026-03-31 16:27:25 -03:00
pagecurl	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
print	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
python	tests: fix typo psp has extension psp not psd	2026-03-11 09:28:39 -04:00
screenshot	plug-ins: Show correct cursor in Windows Screenshot	2026-03-05 15:54:34 +00:00
script-fu	plug-ins: remove gimp_quit() calls from the Script-Fu server.	2026-04-07 19:25:35 +02:00
selection-to-path	app, plug-ins: Comment unused stuff on macOS	2026-03-29 17:19:42 -03:00
twain	plug-ins: Do not call in-build-gimp.py before building plugins	2026-01-04 09:39:02 -03:00
generate_mime_ext.py	build/macos, plug-ins: Generate file associations for macOS automatically	2026-01-17 18:13:23 -03:00
meson.build	plug-ins: Fix meson warning about missing check: kwarg	2026-03-27 09:53:03 -03:00