Commit Graph

11 Commits

Author SHA1 Message Date
Simon Budig 9cc8d78ff3 Harden the PSD plugin against integer overflows.
Issues discovered by Stefan Cornelius, Secunia Research, advisory SA37232
and CVE identifier CVE-2009-3909. Fixes bug #600741.
2009-11-17 11:14:16 +01:00
Simon Budig 0e440cb6d4 Fix the PSD structs to use signed ints for bounding box coordinates. 2009-11-17 01:13:52 +01:00
Michael Natterer d9b5207aa2 Change licence to GPLv3 (and to LGPLv3 for libgimp).
2009-01-17  Michael Natterer  <mitch@gimp.org>

	* all files with a GPL header and all COPYING files:

	Change licence to GPLv3 (and to LGPLv3 for libgimp).

	Cleaned up some copyright headers and regenerated the parsers in
	the ImageMap plugin.


svn path=/trunk/; revision=27913
2009-01-17 22:28:01 +00:00
Martin Nordholts c7a49fdeb1 Bug 555587 – PSD file crashes PSD plug-in
* plug-ins/file-psd/psd-load.c (add_merged_image): Handle
img_a->alpha_names being NULL.

svn path=/trunk/; revision=27181
2008-10-08 19:59:36 +00:00
Martin Nordholts c88595fd82 Decrease scope of comp_mode and initialize it.
* plug-ins/file-psd/psd-load.c (add_layers): Decrease scope of
comp_mode and initialize it.

svn path=/trunk/; revision=27176
2008-10-08 18:09:47 +00:00
Martin Nordholts 74402e2eb0 Bug 555222 – PSD Load Plugin: unsupported compression mode
* plug-ins/file-psd/psd-load.c (add_layers): Some PSD files can
have channels where a compression method used for the channel data
is specified, but without any actual channel data. Handle this
case. Fix inspired by patch from Chris Mohler.

svn path=/trunk/; revision=27175
2008-10-08 18:00:48 +00:00
Martin Nordholts 9ae47b764f Use the new COMP_MODE_SIZE constant instead of a magic number.
* plug-ins/file-psd/psd-load.c (add_merged_image): Use the new
COMP_MODE_SIZE constant instead of a magic number.

svn path=/trunk/; revision=26889
2008-09-06 15:22:30 +00:00
Martin Nordholts 9983251f8a Bug 544939 – PSD Plugin crash (maybe only PSD files created by
Paintshop Pro)

* plug-ins/file-psd/psd-load.c (add_layers): Fix integer underflow
and only attempt to read channel data if there is any channel
data.

svn path=/trunk/; revision=26888
2008-09-06 15:10:40 +00:00
Martin Nordholts a6c74bcf39 Also consider unknown compression methods unsupported. This gives an error
* plug-ins/file-psd/psd-load.c (add_layers): Also consider unknown
compression methods unsupported. This gives an error message
instead of a crash for bug #544939. The PSD loader still fails to
read the correct compression method however.

svn path=/trunk/; revision=26886
2008-09-06 12:21:18 +00:00
Sven Neumann 5e347ed24b plug-ins/file-psd/psd.c plug-ins/file-psd/psd-load.[ch]
2008-08-20  Sven Neumann  <sven@gimp.org>

	* plug-ins/file-psd/psd.c
	* plug-ins/file-psd/psd-load.[ch]
	* plug-ins/file-psd/psd-save.c 
	* plug-ins/file-psd/psd-thumb-load.[ch]: pass error messages 
with
	the return values instead of calling g_message().


svn path=/trunk/; revision=26671
2008-08-20 07:36:25 +00:00
Michael Natterer 3d75c95f95 plug-ins/bmp/* plug-ins/faxg3/* plug-ins/fits/* plug-ins/fli/*
2008-08-11  Michael Natterer  <mitch@gimp.org>

	* plug-ins/bmp/*
	* plug-ins/faxg3/*
	* plug-ins/fits/*
	* plug-ins/fli/*
	* plug-ins/ico/*
	* plug-ins/jpeg/*
	* plug-ins/psd/*
	* plug-ins/sgi/*
	* plug-ins/uri/*
	* plug-ins/xjt/*: removed these...

	* plug-ins/file-bmp/*
	* plug-ins/file-faxg3/*
	* plug-ins/file-fits/*
	* plug-ins/file-fli/*
	* plug-ins/file-ico/*
	* plug-ins/file-jpeg/*
	* plug-ins/file-psd/*
	* plug-ins/file-sgi/*
	* plug-ins/file-uri/*
	* plug-ins/file-xjt/*: and moved them here. Changed executable
	names to "file-foo".

	* plug-ins/Makefile.am: changed accordingly.

	* plug-ins/common/*: rename all file plug-ins to file-foo.c. Get
	rid of the names "poppler" and "postscript" and call them
	"file-pdf" and "file-ps" because the conflict with standard
	autofoo targets is gone.

	* plug-ins/common/plugin-defs.pl: changed accordingly.

	* plug-ins/common/mkgen.pl: make sure cflags variables are named
	"PLUG_IN_NAME_CFLAGS" and not "PLUG-IN-NAME_CFLAGS"

	* plug-ins/common/Makefile.am: regenerated.

	* configure.in: change folders and variable names to match above
	changes.


svn path=/trunk/; revision=26494
2008-08-11 10:06:13 +00:00