Skip to content

Avoid possible overflow when multiplication result is cast up/down #4412

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Mar 9, 2025

Conversation

lovell
Copy link
Member

@lovell lovell commented Mar 7, 2025

I'm not aware of any specific problems these might have been causing but forcing the relevant type for multiplication should help prevent vulnerabilities in the future.

These were all found via CodeQL.

Copy link
Member

@kleisauke kleisauke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!

@lovell lovell force-pushed the 8.16-avoid-multiply-overflow branch from 21ede63 to 4e2df84 Compare March 8, 2025 21:17
@kleisauke kleisauke mentioned this pull request Mar 9, 2025
@lovell lovell merged commit 82c7c05 into libvips:8.16 Mar 9, 2025
6 checks passed
@lovell lovell deleted the 8.16-avoid-multiply-overflow branch March 9, 2025 11:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy