vpx/src/vpx_image.c | 24 16 + 8 - 0 !
1 file changed, 16 insertions(+), 8 deletions(-)

 fix oob caused by odd frame width, cve-2017-13194

test/decode_api_test.cc | 54 35 + 19 - 0 !
vp8/common/postproc.c | 2 1 + 1 - 0 !
vp8/decoder/dboolhuff.h | 2 1 + 1 - 0 !
vp9/vp9_dx_iface.c | 5 4 + 1 - 0 !
vpx_dsp/bitreader.h | 2 1 + 1 - 0 !
vpx_dsp/bitreader_buffer.c | 2 1 + 1 - 0 !
6 files changed, 43 insertions(+), 24 deletions(-)

 [patch] vp8: fix use-after-free in postproc.

to address CVE-2019-9232 CVE-2019-9325 CVE-2019-9433