[JPWL] fix CVE-2018-16375
Signed-off-by: Young_X <YangX92@hotmail.com>
This commit is contained in:
parent
c5bd64ea14
commit
619e1b086e
|
@ -41,6 +41,7 @@
|
||||||
#include <stdlib.h>
|
#include <stdlib.h>
|
||||||
#include <string.h>
|
#include <string.h>
|
||||||
#include <ctype.h>
|
#include <ctype.h>
|
||||||
|
#include <limits.h>
|
||||||
|
|
||||||
#ifdef OPJ_HAVE_LIBTIFF
|
#ifdef OPJ_HAVE_LIBTIFF
|
||||||
#include <tiffio.h>
|
#include <tiffio.h>
|
||||||
|
@ -1862,6 +1863,15 @@ opj_image_t* pnmtoimage(const char *filename, opj_cparameters_t *parameters)
|
||||||
return NULL;
|
return NULL;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/* This limitation could be removed by making sure to use size_t below */
|
||||||
|
if (header_info.height != 0 &&
|
||||||
|
header_info.width > INT_MAX / header_info.height) {
|
||||||
|
fprintf(stderr, "pnmtoimage:Image %dx%d too big!\n",
|
||||||
|
header_info.width, header_info.height);
|
||||||
|
fclose(fp);
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
|
|
||||||
format = header_info.format;
|
format = header_info.format;
|
||||||
|
|
||||||
switch (format) {
|
switch (format) {
|
||||||
|
|
Loading…
Reference in New Issue