RootCauseunvalidated
when n > num_values, indices go negative — for (i=0; i<n; i++) ht->values[ht->num_values - i] = ht->values[ht->num_values - i - 1];. Outcome: fix adds n > ht->num_values check in grub_png_insert_huff_item at line 419-424.
9764c581-ea75-4d63-b77f-d15c25b4fda7
when n > num_values, indices go negative — for (i=0; i<n; i++) ht->values[ht->num_values - i] = ht->values[ht->num_values - i - 1];. Outcome: fix adds n > ht->num_values check in grub_png_insert_huff_item at line 419-424.