sixel: clamp max width/height in 'CSI ? 2 ; 3 ; W ; H S'

This ensures the user cannot raise the maximum sixel size, where
width*height cannot be represented as an integer.

Note, we should consider moving all sixel width/height variables from
int to size_t. But, since it doesn't make any sense with overly large
sixel images, clamping the max width/height is enough. Add a
static_assert() that checks SIXEL_MAX_WIDTH * SIXEL_MAX_HEIGHT doesn't
overflow.

Closes #2343
This commit is contained in:
Daniel Eklöf 2026-05-22 11:18:15 +02:00
parent 4bf60d0fbc
commit 92187d2e4e
No known key found for this signature in database
GPG key ID: 5BBD4992C116573F
3 changed files with 14 additions and 5 deletions

View file

@ -82,10 +82,13 @@
* DECCRA not clamping or verifying the destination rectangle
([#2352][2352]).
* Empty selection clearing the clipboard ([#2327][2327]).
* Sixel image max size not clamped, causing foot to crash on very
large sixel images ([#2343][2343]).
[2353]: https://codeberg.org/dnkl/foot/issues/2353
[2352]: https://codeberg.org/dnkl/foot/issues/2352
[2327]: https://codeberg.org/dnkl/foot/issues/2327
[2343]: https://codeberg.org/dnkl/foot/issues/2343
### Security