dallasgroot/Gimp
dallasgroot/Gimp
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

plug-ins: Fix ZDI-CAN-27684

Browse source 
Prevent overflow attack by checking if
output >= max, not just output > max.

(cherry picked from commit 5f4329d324)
This commit is contained in:
Alx Sa 2025-09-03 13:41:10 +00:00 committed by Jehan
parent 7422e66a50
commit f520f4c268
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
plug-ins/file-icns/file-icns-load.c
View file

@ -323,7 +323,7 @@ icns_decompress (guchar *dest,
for (run -= 125; run > 0; run--)
{
if (out > max)
if (out >= max)
{
g_message ("Corrupt icon? compressed run overflows output size.");
return FALSE;
@ -341,7 +341,7 @@ icns_decompress (guchar *dest,
g_message ("Corrupt icon: uncompressed run overflows input size.");
return FALSE;
}
if (out > max)
if (out >= max)
{
g_message ("Corrupt icon: uncompressed run overflows output size.");
return FALSE;