12 lines
500 B
Diff
12 lines
500 B
Diff
|
diff --git a/src/share/native/sun/java2d/cmm/lcms/cmstypes.c b/src/share/native/sun/java2d/cmm/lcms/cmstypes.c
|
||
|
|
--- openjdk/jdk/src/share/native/sun/java2d/cmm/lcms/cmstypes.c
|
||
|
|
+++ openjdk/jdk/src/share/native/sun/java2d/cmm/lcms/cmstypes.c
|
||
|
|
@@ -1484,6 +1484,7 @@
|
||
|
|
|
||
|
|
// Check for overflow
|
||
|
|
if (Offset < (SizeOfHeader + 8)) goto Error;
|
||
|
|
+ if ((Offset + Len) > SizeOfTag + 8) goto Error;
|
||
|
|
|
||
|
|
// True begin of the string
|
||
|
|
BeginOfThisString = Offset - SizeOfHeader - 8;
|