1
0
mirror of https://github.com/libjpeg-turbo/libjpeg-turbo.git synced 2026-10-23 11:48:53 +03:00

ChangeLog.md: Further restrict the scope of #929

In order for num_cols to wrap around, it had to be less than the number
of non-4-byte-aligned rows.  Since the output pixels are 2 bytes,
effectively num_cols had to be an odd number less than half of the
vertical sampling factor.  Since the vertical sampling factor cannot be
> 4, num_cols had to be 1.
This commit is contained in:
DRC
2026-10-22 15:25:53 -04:00
parent 4c1492f8dd
commit 6d87376c1d

View File

@@ -164,11 +164,11 @@ dropped into a subsampled input image or vice versa.
converters that occurred when attempting to decompress more than one scanline
at a time from a vertically subsampled JPEG image. These issues caused a
buffer overrun and subsequent segfault if the output image rows were not 4-byte
aligned and both the vertical sampling factor and the number of scanlines
decompressed at a time were greater than 2. In other cases, the issues caused
incorrect dithered output. The issues could not be reproduced using djpeg
(which decompresses one scanline at a time) and were not known to exist in any
other applications.
aligned, the image width was 1, and both the vertical sampling factor and the
number of scanlines decompressed at a time were greater than 2. In other
cases, the issues caused incorrect dithered output. The issues could not be
reproduced using djpeg (which decompresses one scanline at a time) and were not
known to exist in any other applications.
3.0.4