From 14ab311d2f3814ec36ec6609b946364383f6a956 Mon Sep 17 00:00:00 2001 From: Mickael Savinaud Date: Mon, 19 Nov 2012 13:37:04 +0000 Subject: [PATCH] [trunk] fix issue 191 (thanks Even) --- src/lib/openjp2/j2k.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/lib/openjp2/j2k.c b/src/lib/openjp2/j2k.c index 1b116680..05bd3452 100644 --- a/src/lib/openjp2/j2k.c +++ b/src/lib/openjp2/j2k.c @@ -7881,6 +7881,12 @@ OPJ_BOOL opj_j2k_read_SPCod_SPCoc( opj_j2k_t *p_j2k, opj_read_bytes(l_current_ptr, &l_tccp->numresolutions ,1); /* SPcox (D) */ ++l_tccp->numresolutions; /* tccp->numresolutions = read() + 1 */ + if (l_tccp->numresolutions > OPJ_J2K_MAXRLVLS) { + opj_event_msg(p_manager, EVT_ERROR, + "Invalid value for numresolutions : %d\n", + l_tccp->numresolutions); + return OPJ_FALSE; + } ++l_current_ptr; /* If user wants to remove more resolutions than the codestream contains, return error */