Skip to content

Commit

Permalink
Updated security descriptions
Browse files Browse the repository at this point in the history
Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
  • Loading branch information
radarhere and hugovk committed Jan 1, 2023
1 parent 35b4c43 commit e908afe
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions docs/releasenotes/9.4.0.rst
Original file line number Diff line number Diff line change
Expand Up @@ -78,14 +78,14 @@ Fix memory DOS in ImageFont
A corrupt or specially crafted TTF font could have font metrics that lead to
unreasonably large sizes when rendering text in font. ``ImageFont.py`` did not
check the image size before allocating memory for it. This dates to the PIL
fork. Pilllow 8.2.0 added a check for large sizes, but did not consider the
case where one dimension was zero.
fork. Pillow 8.2.0 added a check for large sizes, but did not consider the
case where one dimension is zero.

Null pointer dereference crash in ImageFont
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Pillow attempted to dereference a null pointer in ``ImageFont``, leading to a
crash. An error is now raised instead. This would have been present since
crash. An error is now raised instead. This has been present since
Pillow 8.0.0.

Other Changes
Expand Down

0 comments on commit e908afe

Please sign in to comment.