tree 17625d3a21c13ef90ebc9ca45ba3b3d6f4b4a5cf
parent 445ab0e75e6df9b6a4d3d5437bda2a7cac74eb72
author Roland Shoemaker <roland@golang.org> 1703008438 -0800
committer Gopher Robot <gobot@golang.org> 1703008986 +0000

webp: disallow multiple VP8X chunks

Per the spec, there should only be one. A malformed image containing
multiple VP8X chunks can cause unexpected memory usage, since
DecodeConfig will only parse the first chunk, which contains the canvas
size, but a subsequent chunk can indicate a significantly larger canvas,
which we will then try to allocate a buffer for.

Change-Id: I240ae76162f4293f6e6991020d18d4d3270cb9b6
Reviewed-on: https://go-review.googlesource.com/c/image/+/551416
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>
Auto-Submit: Roland Shoemaker <roland@golang.org>