From: Lutz M?l. <lu...@us...> - 2003-09-28 17:59:54
|
Update of /cvsroot/libexif/gexif/libjpeg In directory sc8-pr-cvs1:/tmp/cvs-serv26931 Modified Files: jpeg-data.c Log Message: Index: jpeg-data.c =================================================================== RCS file: /cvsroot/libexif/gexif/libjpeg/jpeg-data.c,v retrieving revision 1.9 retrieving revision 1.10 diff -u -d -r1.9 -r1.10 --- jpeg-data.c 17 Sep 2003 11:30:35 -0000 1.9 +++ jpeg-data.c 28 Sep 2003 17:59:40 -0000 1.10 @@ -206,6 +206,7 @@ jpeg_data_append_section (data); s = &data->sections[data->count - 1]; s->marker = marker; + s->content.generic.data = NULL; o += i + 1; switch (s->marker) { @@ -216,7 +217,9 @@ /* Read the length of the section */ len = ((d[o] << 8) | d[o + 1]) - 2; + if (len > size) { o = size; break; } o += 2; + if (o + len > size) { o = size; break; } switch (s->marker) { case JPEG_MARKER_APP1: |