Blender Git Commits

Fix buffer overflow vulnerability in curve, font, particles code.

Solves these security issues from T52924:
CVE-2017-12102
CVE-2017-12103
CVE-2017-12104

While the specific overflow issue may be fixed, loading the repro .blend
files may still crash because they are incomplete and corrupt. The way
they crash may be impossible to exploit, but this is difficult to prove.

Differential Revision: https://developer.blender.org/D3002

Fix buffer overflow vulnerabilities in mesh code.

Solves these security issues from T52924:
CVE-2017-12081
CVE-2017-12082
CVE-2017-12086
CVE-2017-12099
CVE-2017-12100
CVE-2017-12101
CVE-2017-12105

While the specific overflow issue may be fixed, loading the repro .blend
files may still crash because they are incomplete and corrupt. The way
they crash may be impossible to exploit, but this is difficult to prove.

Differential Revision: https://developer.blender.org/D3002

Fix Linux/GCC compiler warning in recent fixes.

Fix buffer overflow vulernability in thumbnail file reading.

Fixes CVE-2017-2908 from T52924.

Differential Revision: https://developer.blender.org/D3001

Fix buffer overflows in TIFF, PNG, IRIS, DPX, HDR and AVI loading.

Solves these security issues from T52924:
CVE-2017-2899
CVE-2017-2900
CVE-2017-2901
CVE-2017-2902
CVE-2017-2903
CVE-2017-2904
CVE-2017-2905
CVE-2017-2906
CVE-2017-2907
CVE-2017-2918

Differential Revision: https://developer.blender.org/D2999

Memory: add MEM_malloc_arrayN() function to protect against overflow.

Differential Revision: https://developer.blender.org/D3002

Cleanup: SGI format, remove unused struct members

Fix SGI foramt reader CVE-2017-2901

Integer Overflow Code Execution Vulnerability.

Reader no longer crashes on corrupt images (from own fuzz testing).

Cleanup: SGI format, avoid overflow

Harmless but causes warnings

Cleanup: SGI format, use uint/short/char types

Fix writing Iris images w/ invalid header

Regression in e142ae77cadf

Correct readme and note.

Merge branch 'master' into temp-openjpeg23

Merge branch 'blender2.8' into greasepencil-object

Change default smooth parameters for brushes

Fix T53810: Crash removing a scene used in render

Header drawing accesses the scene too.

corrected some more special constraint breaking activation behavior (was activating too much)

Merge branch 'blender2.8' into greasepencil-object

Revert "Fix T53752: Draw curve fails w/ stylus"

This reverts commit d0e0f33f57b02fecf75c08f3c144d07915367781.

Requested by author, since it raised new issues, better not have it in
bugfix release!

Merge branch 'blender2.8' into greasepencil-object