expo-gl 16.0.0-canary-20250320-7a205d3 → 16.0.0-canary-20250331-817737a

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -10,6 +10,8 @@
10
10
 
11
11
  ### 🐛 Bug fixes
12
12
 
13
+ - stb_image PNG: Checks for invalid DEFLATE codes. ([#35184](https://github.com/expo/expo/pull/35184) by [@manoj23](https://github.com/manoj23))
14
+
13
15
  ### 💡 Others
14
16
 
15
17
  - [Android] Started using expo modules gradle plugin. ([#34176](https://github.com/expo/expo/pull/34176) by [@lukmccall](https://github.com/lukmccall))
@@ -4010,13 +4010,15 @@ static int stbi__parse_huffman_block(stbi__zbuf *a) {
4010
4010
  a->zout = zout;
4011
4011
  return 1;
4012
4012
  }
4013
+ if (z >= 286)
4014
+ return stbi__err("bad huffman code", "Corrupt PNG"); // per DEFLATE, length codes 286 and 287 must not appear in compressed data
4013
4015
  z -= 257;
4014
4016
  len = stbi__zlength_base[z];
4015
4017
  if (stbi__zlength_extra[z])
4016
4018
  len += stbi__zreceive(a, stbi__zlength_extra[z]);
4017
4019
  z = stbi__zhuffman_decode(a, &a->z_distance);
4018
- if (z < 0)
4019
- return stbi__err("bad huffman code", "Corrupt PNG");
4020
+ if (z < 0 || z >= 30)
4021
+ return stbi__err("bad huffman code", "Corrupt PNG"); // per DEFLATE, distance codes 30 and 31 must not appear in compressed data
4020
4022
  dist = stbi__zdist_base[z];
4021
4023
  if (stbi__zdist_extra[z])
4022
4024
  dist += stbi__zreceive(a, stbi__zdist_extra[z]);
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "expo-gl",
3
- "version": "16.0.0-canary-20250320-7a205d3",
3
+ "version": "16.0.0-canary-20250331-817737a",
4
4
  "description": "Provides GLView that acts as OpenGL ES render target and gives GL context object implementing WebGL 2.0 specification.",
5
5
  "main": "build/index.js",
6
6
  "types": "build/index.d.ts",
@@ -43,11 +43,11 @@
43
43
  "@types/invariant": "^2.2.33",
44
44
  "@types/offscreencanvas": "2019.6.4",
45
45
  "@types/webgl2": "^0.0.6",
46
- "expo-module-scripts": "4.0.5-canary-20250320-7a205d3",
46
+ "expo-module-scripts": "4.0.5-canary-20250331-817737a",
47
47
  "react-test-renderer": "19.0.0"
48
48
  },
49
49
  "peerDependencies": {
50
- "expo": "53.0.0-canary-20250320-7a205d3",
50
+ "expo": "53.0.0-canary-20250331-817737a",
51
51
  "react": "*",
52
52
  "react-native": "*",
53
53
  "react-native-web": "*"