fix(jpeg_decoder): Add some strict check to avoid bad picture attack

2026-10-02 11:10:54 +03:00 · 2026-06-01 11:27:14 +08:00
parent ca4952594a
commit 6ffafe8e93
4 changed files with 231 additions and 42 deletions
@@ -82,6 +82,7 @@ typedef struct {
    uint8_t mcux;                                               // the best value of minimum coding unit horizontal unit
    uint8_t mcuy;                                               // minimum coding unit vertical unit
    uint8_t qt_tbl_num;                                         // quantization table number
+    uint8_t qt_tbl_seen_mask;                                   // bit i set => qt_tbl[i] populated by a DQT entry
    uint32_t qt_tbl[JPEG_COMPONENT_NUMBER_MAX][JPEG_QUANTIZATION_TABLE_LEN];            // quantization table content [id]
    uint8_t nf;                                                 // number of frames
    uint8_t ci[JPEG_COMPONENT_NUMBER_MAX];                      // Component identifier.