22 lines
747 B
Diff
22 lines
747 B
Diff
|
From e6a0982f7cd9282052b6e3485a458d60629ffa0b Mon Sep 17 00:00:00 2001
|
||
|
|
From: Kevin Backhouse <kevinbackhouse@github.com>
|
||
|
|
Date: Fri, 23 Apr 2021 11:44:44 +0100
|
||
|
|
Subject: [PATCH 2/2] Add bounds check in Jp2Image::doWriteMetadata().
|
||
|
|
|
||
|
|
---
|
||
|
|
src/jp2image.cpp | 1 +
|
||
|
|
1 file changed, 1 insertion(+)
|
||
|
|
|
||
|
|
diff --git a/src/jp2image.cpp b/src/jp2image.cpp
|
||
|
|
index 1694fed27..ca8c9ddbb 100644
|
||
|
|
--- a/src/jp2image.cpp
|
||
|
|
+++ b/src/jp2image.cpp
|
||
|
|
@@ -908,6 +908,7 @@ static void boxes_check(size_t b,size_t m)
|
||
|
|
|
||
|
|
case kJp2BoxTypeUuid:
|
||
|
|
{
|
||
|
|
+ enforce(boxBuf.size_ >= 24, Exiv2::kerCorruptedMetadata);
|
||
|
|
if(memcmp(boxBuf.pData_ + 8, kJp2UuidExif, 16) == 0)
|
||
|
|
{
|
||
|
|
#ifdef EXIV2_DEBUG_MESSAGES
|