commit 71ed73cf86132394ea25ae9c7ed431e0d71043f5
author Pascal Massimino <pascal.massimino@gmail.com> Fri May 25 11:25:39 2018
committer Pascal Massimino <pascal.massimino@gmail.com> Fri May 25 11:25:39 2018
tree 9538b0c19d7e909fe6588795b376172ca543356c
parent af0e4fbb0669026659983691a15dad23a9f196c1

fix invalid check for buffer size

BUG=webp:383

Change-Id: I8ebbb5ca4860d73c3b59b12e238b54a89184bed0

src/dec/buffer_dec.c

diff --git a/src/dec/buffer_dec.c b/src/dec/buffer_dec.c
index 75eb3c4..3cd94eb 100644
--- a/src/dec/buffer_dec.c
+++ b/src/dec/buffer_dec.c
@@ -74,7 +74,8 @@
   } else {    // RGB checks
     const WebPRGBABuffer* const buf = &buffer->u.RGBA;
     const int stride = abs(buf->stride);
-    const uint64_t size = MIN_BUFFER_SIZE(width, height, stride);
+    const uint64_t size =
+        MIN_BUFFER_SIZE(width * kModeBpp[mode], height, stride);
     ok &= (size <= buf->size);
     ok &= (stride >= width * kModeBpp[mode]);
     ok &= (buf->rgba != NULL);