mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2025-12-13 10:30:05 +01:00
integer overflows, heap corruption
possible arbitrary code execution cannot be ruled out in some cases precautionary checks Originally committed as revision 3813 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
@@ -65,6 +65,9 @@ static void read_sgi_header(ByteIOContext *f, SGIInfo *info)
|
||||
info->xsize = (unsigned short) get_be16(f);
|
||||
info->ysize = (unsigned short) get_be16(f);
|
||||
info->zsize = (unsigned short) get_be16(f);
|
||||
|
||||
if(info->zsize > 4096)
|
||||
info->zsize= 0;
|
||||
|
||||
#ifdef DEBUG
|
||||
printf("sgi header fields:\n");
|
||||
|
||||
Reference in New Issue
Block a user