Gimp/plug-ins
Alx Sa dd2faac351 plug-ins: Resolve ZDI-CAN-28530 for ICNS load
Our ICNS importer did not verify that the ICNS resource
data size was defined as larger than 0. Therefore, it
was possible to create a malicious file that would infinitely
load since the file cursor would not advance. This patch
adds a check for the icon size being 0, and stops the loop
if this is encountered.

Additionally, there is no header defined limit for the number of
icons in an ICNS file. This patch switches from using a hardcoded
256 icon limit to using GLists to dynamically add icons as we read
them in.
2026-01-18 17:17:31 +00:00
..
common plug-ins: fix indentation from previous commit 2026-01-15 10:33:33 -05:00
file-bmp plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
file-dds plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
file-exr plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
file-faxg3 plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
file-fits plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
file-fli plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
file-icns plug-ins: Resolve ZDI-CAN-28530 for ICNS load 2026-01-18 17:17:31 +00:00
file-ico plug-ins: Add overflow checks for ICO loading 2026-01-12 12:17:00 +00:00
file-jpeg plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
file-psd plug-ins: fix incorrect psd dropshadow offsets 2026-01-12 09:14:16 -05:00
file-raw plugins: Make file-raw-utils.c use proper macOS 10.10+ API 2026-01-11 14:56:16 -03:00
file-sgi plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
file-tiff plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
file-webp plug-ins: Don't translate "ms" for WEBP animation 2026-01-07 20:09:21 +00:00
filter-browser plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
flame plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
fractal-explorer plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
gfig plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
gimpressionist plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
gradient-flare plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
help plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
help-browser plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
ifs-compose plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
imagemap plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
lighting plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
map-object plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
metadata plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
pagecurl plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
print plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
python plug-ins: Fix .py plugins on non-relocatable macOS builds 2026-01-15 18:39:32 -03:00
screenshot plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
script-fu plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
selection-to-path plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
twain plug-ins: Do not call in-build-gimp.py before building plugins 2026-01-04 09:39:02 -03:00
generate_mime_ext.py build/macos, plug-ins: Generate file associations for macOS automatically 2026-01-17 18:13:23 -03:00
meson.build build/macos, plug-ins: Generate file associations for macOS automatically 2026-01-17 18:13:23 -03:00