)]}'
{
  "commit": "9e190ae4a3c5edc736fd99ba38be1c9d08ea5320",
  "tree": "17625d3a21c13ef90ebc9ca45ba3b3d6f4b4a5cf",
  "parents": [
    "445ab0e75e6df9b6a4d3d5437bda2a7cac74eb72"
  ],
  "author": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Tue Dec 19 09:53:58 2023 -0800"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Tue Dec 19 18:03:06 2023 +0000"
  },
  "message": "webp: disallow multiple VP8X chunks\n\nPer the spec, there should only be one. A malformed image containing\nmultiple VP8X chunks can cause unexpected memory usage, since\nDecodeConfig will only parse the first chunk, which contains the canvas\nsize, but a subsequent chunk can indicate a significantly larger canvas,\nwhich we will then try to allocate a buffer for.\n\nChange-Id: I240ae76162f4293f6e6991020d18d4d3270cb9b6\nReviewed-on: https://go-review.googlesource.com/c/image/+/551416\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Damien Neil \u003cdneil@google.com\u003e\nAuto-Submit: Roland Shoemaker \u003croland@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d6eefd596b1d31b277a5903440ffc35a8bfca6e5",
      "old_mode": 33188,
      "old_path": "webp/decode.go",
      "new_id": "e211c7d57bf84bc68f280e0389ca35aa9a2f47b9",
      "new_mode": 33188,
      "new_path": "webp/decode.go"
    },
    {
      "type": "modify",
      "old_id": "ad65b108808d78532bf79956667c23cde2f73fae",
      "old_mode": 33188,
      "old_path": "webp/decode_test.go",
      "new_id": "00be03f0726491e89b36e5474a8ebe249d783697",
      "new_mode": 33188,
      "new_path": "webp/decode_test.go"
    }
  ]
}