From e6a0982f7cd9282052b6e3485a458d60629ffa0b Mon Sep 17 00:00:00 2001 From: Kevin Backhouse <kevinbackhouse@github.com> Date: Fri, 23 Apr 2021 11:44:44 +0100 Subject: [PATCH] Add bounds check in Jp2Image::doWriteMetadata(). --- src/jp2image.cpp | 1 + 1 file changed, 1 insertion(+) Index: exiv2-0.27.3/src/jp2image.cpp =================================================================== --- exiv2-0.27.3.orig/src/jp2image.cpp +++ exiv2-0.27.3/src/jp2image.cpp @@ -904,6 +904,7 @@ static void boxes_check(size_t b,size_t case kJp2BoxTypeUuid: { + enforce(boxBuf.size_ >= 24, Exiv2::kerCorruptedMetadata); if(memcmp(boxBuf.pData_ + 8, kJp2UuidExif, 16) == 0) { #ifdef EXIV2_DEBUG_MESSAGES