VisualC-WinRT/SDL2-WinRT.nuspec
author Sam Lantinga <slouken@libsdl.org>
Mon, 18 Feb 2019 07:50:33 -0800
changeset 12612 07c39cbbeacf
parent 9940 f2d5ed0d9686
permissions -rw-r--r--
Fixed bug 4500 - Heap-Buffer Overflow in Map1toN pertaining to SDL_pixels.c

Petr Pisar

The reproducer has these data in BITMAPINFOHEADER:

biSize = 40
biBitCount = 8
biClrUsed = 131075

SDL_LoadBMP_RW() function passes biBitCount as a color depth to SDL_CreateRGBSurface(), thus 256-color pallete is allocated. But then biClrUsed colors are read from a file and stored into the palette. SDL_LoadBMP_RW should report an error if biClrUsed is greater than 2^biBitCount.
dludwig@9940
     1
<?xml version="1.0"?>
dludwig@9940
     2
<package >
dludwig@9940
     3
  <metadata>
dludwig@9940
     4
    <id>SDL2-WinRT</id>
dludwig@9940
     5
    <version>2.0.4-Unofficial</version>
dludwig@9940
     6
    <authors>Sam Lantinga</authors>
dludwig@9940
     7
    <owners>David Ludwig</owners>
dludwig@9940
     8
    <licenseUrl>http://libsdl.org/license.php</licenseUrl>
dludwig@9940
     9
    <projectUrl>http://libsdl.org</projectUrl>
dludwig@9940
    10
    <requireLicenseAcceptance>false</requireLicenseAcceptance>
dludwig@9940
    11
    <description>Unofficial pre-release of LibSDL2, built for WinRT platforms</description>
dludwig@9940
    12
    <copyright>Copyright 2015</copyright>
dludwig@9940
    13
    <tags>SDL2 SDL LibSDL OpenGL C C++ nativepackage</tags>
dludwig@9940
    14
  </metadata>
dludwig@9940
    15
  <files>
dludwig@9940
    16
    <file src="lib\**\*.dll" target="bin"/>
dludwig@9940
    17
    <file src="lib\**\*.lib" target="bin"/>
dludwig@9940
    18
    <file src="lib\**\*.pdb" target="bin"/>
dludwig@9940
    19
    <file src="..\include\**\*.*" target="include"/>
dludwig@9940
    20
    <file src="..\src\**\*.*" target="src"/>
dludwig@9940
    21
    <file src="SDL2-WinRT.targets" target="build\native"/>
dludwig@9940
    22
  </files>
dludwig@9940
    23
</package>