tree c6ea6497b97e3690bf08eb0dfebf57114ae5f5ee
parent bb066689f9a5aba2b72732864ccb4a89e0ef520e
author Wan-Teh Chang <wtc@google.com> 1745015360 -0700
committer Wan-Teh Chang <wtc@google.com> 1745280943 -0700

Declare *RowBytes as size_t in avifImageRGBToYUV()

Declare rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes as size_t in
avifImageRGBToYUV(). This causes multiplications with these variables to
be performed in size_t (which may be 64 bits) instead of uint32_t. For
very large image width and height, these multiplications may overflow
uint32_t.

Acknowledgements: DanisJiang
https://github.com/AOMediaCodec/libavif/security/advisories/GHSA-762c-2538-h844