tiff: in add_string_metadata() check the count more completely

Michael Niedermayer committed 13 years ago

Commit b1683081 parent 5de286e1 file · +1 −1Browse files

Unified · Split

@@ -308,7 +308,7 @@ static int add_string_metadata(int count, const char *name, · 307 unmodified lines
308	308	{
309	309	char *value;
310	310
311		− if (bytestream2_get_bytes_left(&s->gb) < count)
	311	+ if (bytestream2_get_bytes_left(&s->gb) < count \|\| count < 0)
312	312	return AVERROR_INVALIDDATA;
313	313
314	314	value = av_malloc(count + 1);

Keyboard shortcuts