Sophie

Sophie

distrib > Mageia > 8 > x86_64 > by-pkgid > 8615d1ff124bda13503782ea96fa80eb > files > 1

djvulibre-3.5.28-1.1.mga8.src.rpm

From: "Barak A. Pearlmutter" <barak+git@pearlmutter.net>
Date: Mon, 10 May 2021 15:48:24 +0100
Subject: djvulibre-fedora Patch8 djvulibre-3.5.27-check-image-size.patch

---
 libdjvu/IW44Image.cpp | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/libdjvu/IW44Image.cpp b/libdjvu/IW44Image.cpp
index e8d4b44..aa3d554 100644
--- a/libdjvu/IW44Image.cpp
+++ b/libdjvu/IW44Image.cpp
@@ -678,7 +678,11 @@ IW44Image::Map::image(signed char *img8, int rowsize, int pixsep, int fast)
   size_t sz = bw * bh;
   if (sz / (size_t)bw != (size_t)bh) // multiplication overflow
     G_THROW("IW44Image: image size exceeds maximum (corrupted file?)");
+  if (sz == 0)
+    G_THROW("IW44Image: zero size image (corrupted file?)");
   GPBuffer<short> gdata16(data16,sz);
+  if (data16 == NULL)
+    G_THROW("IW44Image: unable to allocate image data");
   // Copy coefficients
   int i;
   short *p = data16;