From 521a88b66f0bd76c52fef0d84776478c0b0664d9 Mon Sep 17 00:00:00 2001 From: pommicket Date: Wed, 20 Sep 2023 23:38:34 -0400 Subject: - add overflow check for chunk length. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit this could have resulted in debug-only panics for maliciously crafted images. - add “impossible compressed size” check which slightly mitigates the problem of a malicious image causing you to allocate a shitton of memory. --- CHANGELOG.md | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 CHANGELOG.md (limited to 'CHANGELOG.md') diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..265e560 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,6 @@ +## 0.1.1 + +- add overflow check for chunk length. + this could have resulted in debug-only panics for maliciously crafted images. +- add “impossible compressed size” check which slightly mitigates the + problem of a malicious image causing you to allocate a shitton of memory. -- cgit v1.2.3