dallasgroot/Gimp
dallasgroot/Gimp
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Gimp/plug-ins/common
History
Alx Sa f64c9c23ba plug-ins: Mitigate ZDI-CAN-28863 
Resolves #15969

It is possible to set the number of color components
in the JPEG 2000 file separate from the color space,
and OpenJPEG reports that value as-is. This can result
in a buffer overflow if the num_components variable is
larger than the number of channels in the color space.

This patch adds a check to make sure num_components
is within range. If it's larger, then we clamp it to the maximum
value for that color model.
2026-03-12 13:48:45 +00:00
..
align-layers.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
animation-optimize.c Fix spelling errors found with codespell 2025-01-04 15:11:03 +00:00
animation-play.c plug-ins: Add option to close via ESC key 2025-11-06 07:33:06 +00:00
blinds.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
border-average.c plug-ins: Fix Title Case usages 2025-11-10 13:02:05 +01:00
busy-dialog.c plug-ins: plug-in-busy-dialog arguments should not depend on run-mode. 2026-01-08 21:27:13 +01:00
checkerboard.c extensions, libgimp, plug-ins: remove n_drawables arg from GimpImageProcedure's… 2024-10-28 22:08:45 +01:00
cml-explorer.c plug-in:cml-explorer: Don't use short forms 2025-11-16 17:22:00 +00:00
colormap-remap.c extensions, libgimp, plug-ins: remove n_drawables arg from GimpImageProcedure's… 2024-10-28 22:08:45 +01:00
compose.c plug-ins: use a temporary image to get the buffer... 2025-09-04 20:05:22 +02:00
contrast-retinex.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
crop-zealous.c extensions, libgimp, plug-ins: remove n_drawables arg from GimpImageProcedure's… 2024-10-28 22:08:45 +01:00
curve-bend.c plug-ins: also retrieve values from args in non-interactive mode. 2026-01-31 17:15:54 +01:00
decompose.c extensions, libgimp, plug-ins: remove n_drawables arg from GimpImageProcedure's… 2024-10-28 22:08:45 +01:00
depth-merge.c extensions, libgimp, plug-ins: remove n_drawables arg from GimpImageProcedure's… 2024-10-28 22:08:45 +01:00
despeckle.c plug-ins: Fix Title Case usages 2025-11-10 13:02:05 +01:00
destripe.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
file-aa.c app, libgimpcolor, plug-ins: move legacy luminance macros to private. 2024-11-02 00:27:02 +01:00
file-cel.c Issue #12045: no defaults for plugin args of type File. 2025-01-22 17:53:21 +01:00
file-compressor.c app, libgimpthumb, plug-ins, tools: Fix POSIX namespace warnings on MSVC 2026-02-28 10:06:46 -03:00
file-csource.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
file-desktop-link.c plug-ins: fix some broken macros with a massive search-and-replace. 2023-10-18 18:29:37 +02:00
file-dicom.c plug-ins: remove doubled word in dicom string 2025-09-03 23:03:07 +02:00
file-farbfeld.c plug-ins: Fix ZDI-CAN-27836 2025-09-03 22:10:34 +00:00
file-gbr.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
file-gegl.c app, libgimp*, pdb, plug-ins: review and enhance MR !1549. 2024-08-18 22:46:47 +02:00
file-gif-export.c libgimp, plug-ins: rename the various "save-*" metadata arguments… 2025-01-20 17:58:30 +01:00
file-gif-load.c plug-ins: Fix memory leaks in file-gif-load.c 2025-08-16 12:38:05 +00:00
file-gih.c app, libgimpbase, plug-ins: deprecate GimpPixPipe. 2025-09-11 16:23:57 +02:00
file-glob.c plug-ins: Port argument macros to functions 2024-06-13 23:17:48 +00:00
file-header.c plug-ins: get rid of all remaining usage of gimp_image_[gs]et_colormap(). 2024-09-23 18:20:14 +02:00
file-heif.c plug-ins: Mark FF, AVIF, LNK, QOI and ICNS names as per-process translatable 2025-06-21 10:05:17 +00:00
file-html-table.c Issue #12012: Don't require GUI for C source and HTML export 2025-09-06 19:25:57 +00:00
file-iff.c plug-ins: Fix ZDI-CAN-28405 for IFF plug-in 2026-03-08 14:16:44 +00:00
file-jp2.c plug-ins: Mitigate ZDI-CAN-28863 2026-03-12 13:48:45 +00:00
file-jpegxl.c plug-ins: simplify JXL export options 2025-01-29 14:43:33 +00:00
file-lnk.c plug-ins: Mark LNK and ICNS descriptions as per-process translatable 2025-06-21 10:05:17 +00:00
file-mng.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
file-paa.c plug-ins: fix newline format with dos2unix. 2026-03-03 10:57:05 +01:00
file-pat.c app, libgimp*, plug-ins: move all GimpObjectArray procedure args to GimpCoreObjectArray. 2024-10-25 23:28:42 +02:00
file-pcx.c plug-ins:: fix #15960 PCX buffer overflow 2026-03-08 15:18:44 -04:00
file-pdf-export.c app, libgimp*, plug-ins: fix previous commit and add gimp_cairo_surface_get_buffer(). 2025-11-08 20:34:55 +01:00
file-pdf-load.c libgimpwidgets, plug-in: Reduce height of Load PDF dialog 2025-01-25 17:27:55 +00:00
file-pix.c app, libgimp*, pdb, plug-ins: review and enhance MR !1549. 2024-08-18 22:46:47 +02:00
file-png.c core, plug-ins: Fix bugs noted by Coverity scan 2025-08-15 03:38:27 +00:00
file-pnm.c ZDI-CAN-28158: use g_malloc0 instead of g_malloc 2025-12-05 21:20:29 -03:00
file-ps.c plug-ins: ps default unit is millimeter 2025-11-30 23:25:45 +01:00
file-psp.c plug-ins: fix #15970 buffer overflow in file-psp 2026-03-07 15:55:40 -05:00
file-pvr.c plug-ins: don't close a NULL FILE. 2025-10-27 12:17:02 +01:00
file-qoi.c plug-ins: Mark FF, AVIF, LNK, QOI and ICNS names as per-process translatable 2025-06-21 10:05:17 +00:00
file-raw-data.c app, libgimpthumb, plug-ins, tools: Fix POSIX namespace warnings on MSVC 2026-02-28 10:06:46 -03:00
file-seattle-filmworks.c core, plug-ins: Fix bugs noted by Coverity scan 2025-08-15 03:38:27 +00:00
file-sunras.c plug-ins: get rid of all remaining usage of gimp_image_[gs]et_colormap(). 2024-09-23 18:20:14 +02:00
file-svg.c plug-ins: the embedded raster export format in SVG should be more subtle. 2025-11-15 14:53:59 +01:00
file-tga.c plug-ins: get rid of all remaining usage of gimp_image_[gs]et_colormap(). 2024-09-23 18:20:14 +02:00
file-tim.c plug-ins: fix newline format with dos2unix. 2026-03-03 10:57:05 +01:00
file-wbmp.c plug-ins: fix ZDI-CAN-27878 2025-09-03 15:25:55 -04:00
file-wmf.c plug-ins: removing a string because of an obvious typo. 2024-08-24 20:29:52 +02:00
file-xbm.c libgimp, plug-ins: rename the various "save-*" metadata arguments… 2025-01-20 17:58:30 +01:00
file-xmc.c plug-ins: Fix clang-format warnings in XMC plug-in. 2026-01-25 22:15:36 +00:00
file-xpm.c Issue #13066: Opening XPM crashes XPM plugin. 2026-03-10 16:38:21 +00:00
file-xwd.c plug-ins: fix indentation from previous commit 2026-01-15 10:33:33 -05:00
film.c extensions, libgimp, plug-ins: remove n_drawables arg from GimpImageProcedure's… 2024-10-28 22:08:45 +01:00
gradient-map.c app, libgimp, pdb, plug-ins: gimp_gradient_get_uniform_samples() returns an array of GeglColor. 2024-11-03 13:35:16 +01:00
grid.c plug-ins: Port legacy Grid to GimpProcedureDialog 2025-07-18 01:57:54 +00:00
guillotine.c core, plug-ins: Fix bugs noted by Coverity scan 2025-08-15 03:38:27 +00:00
hot.c plug-ins: Fix Title Case usages 2025-11-10 13:02:05 +01:00
jigsaw.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
mail.c extensions, libgimp, plug-ins: remove n_drawables arg from GimpImageProcedure's… 2024-10-28 22:08:45 +01:00
meson.build build, extensions, plug-ins: Add support to MSVC's resource compiler too 2025-11-29 18:18:57 -03:00
nl-filter.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
plugin-browser.c libgimpwidgets: make GimpBrowser emit "stop-search" signal 2025-12-07 19:46:03 +01:00
procedure-browser.c plug-ins: Port argument macros to functions 2024-06-13 23:17:48 +00:00
qbist.c plug-ins: Fix warning in Qbist dialog_save () 2026-02-23 15:40:12 +00:00
sample-colorize.c Fix spelling errors found with codespell 2025-01-04 15:11:03 +00:00
smooth-palette.c plug-ins: Fix color format for Smooth Palette... 2024-11-14 11:33:14 +00:00
sparkle.c plug-ins: Fix Title Case usages 2025-11-10 13:02:05 +01:00
sphere-designer.c plug-in sphere-designer: Make a string clearer 2025-10-28 10:36:06 +00:00
tile-small.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
tile.c libgimp, libgimpwidgets: Add GimpCoordinates widget... 2025-06-10 19:37:35 +00:00
unit-editor.c app, libgimpwidgets, plug-ins: add tooltip arg to gimp_help_connect(). 2024-08-24 23:29:39 +02:00
van-gogh-lic.c app, libgimp, plug-ins: move our code to use only non-deprecated code. 2025-11-17 12:47:20 +01:00
warp.c extensions, libgimp, plug-ins: remove n_drawables arg from GimpImageProcedure's… 2024-10-28 22:08:45 +01:00
wavelet-decompose.c plug-ins: Port from GimpScaleEntry to GimpSpinScale 2025-11-06 05:06:09 +02:00
web-browser.c plug-ins: Port argument macros to functions 2024-06-13 23:17:48 +00:00
web-page.c plug-ins: Port argument macros to functions 2024-06-13 23:17:48 +00:00