Commit Graph
1 Commits
Author SHA1 Message Date
Aljo Joby 09452b0964 rgb: reject RLE start offsets that underflow the raster data
The start table is stored as file offsets. We subtract the
header+table size to get an index into the remaining data.
If the file offset is smaller than that, the subtract wraps
and the later start+length check can wrap too.

Drop the file instead of walking off the buffer.
2026-08-14 21:03:38 +05:30