mirror of
https://github.com/python-pillow/Pillow.git
synced 2024-12-26 18:06:18 +03:00
Merge pull request #2501 from radarhere/releasenotes
Corrected syntax in release notes
This commit is contained in:
commit
da2ea4cfe3
|
@ -11,7 +11,7 @@ disclosure or corruption.
|
|||
|
||||
Specifically, when parameters from the image are passed into
|
||||
``Image.core.map_buffer``, the size of the image was calculated with
|
||||
``xsize``*``ysize``*``bytes_per_pixel``. This will overflow if the
|
||||
``xsize`` * ``ysize`` * ``bytes_per_pixel``. This will overflow if the
|
||||
result is larger than SIZE_MAX. This is possible on a 32-bit system.
|
||||
|
||||
Furthermore this ``size`` value was added to a potentially attacker
|
||||
|
|
Loading…
Reference in New Issue
Block a user