diff options
| author | headshog <craaaaaachind@gmail.com> | 2023-12-06 17:47:02 +0300 |
|---|---|---|
| committer | Even Rouault <even.rouault@spatialys.com> | 2023-12-08 15:17:53 +0100 |
| commit | 67e6a79bcf6b2ea5503f47954537d14ed37e4a72 (patch) | |
| tree | 5402fbcd4864cbd235c101354f03d6c961673908 /src/lib | |
| parent | b0e83a1b3399f5f847250bdc044a96f22cb156d7 (diff) | |
fix j2k.c:11114
Diffstat (limited to 'src/lib')
| -rw-r--r-- | src/lib/openjp2/j2k.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/lib/openjp2/j2k.c b/src/lib/openjp2/j2k.c index 9dbba8f1..901228b5 100644 --- a/src/lib/openjp2/j2k.c +++ b/src/lib/openjp2/j2k.c @@ -11101,6 +11101,10 @@ static OPJ_BOOL opj_j2k_read_SQcd_SQcc(opj_j2k_t *p_j2k, l_tccp->stepsizes[l_band_no].mant = 0; } } + + if (*p_header_size < l_num_band) { + return OPJ_FALSE; + } *p_header_size = *p_header_size - l_num_band; } else { for (l_band_no = 0; l_band_no < l_num_band; l_band_no++) { @@ -11111,6 +11115,10 @@ static OPJ_BOOL opj_j2k_read_SQcd_SQcc(opj_j2k_t *p_j2k, l_tccp->stepsizes[l_band_no].mant = l_tmp & 0x7ff; } } + + if (*p_header_size < 2 * l_num_band) { + return OPJ_FALSE; + } *p_header_size = *p_header_size - 2 * l_num_band; } |
