python-pillow/Pillow
1
1
Fork 0
mirror of https://github.com/python-pillow/Pillow.git synced 2025-01-19 13:54:18 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8408 from radarhere/fli

Browse Source
This commit is contained in:
Hugo van Kemenade 2024-09-30 14:50:54 +03:00 committed by GitHub
commit 0314bb3331
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/libImaging/FliDecode.c
View File

@ -224,7 +224,7 @@ ImagingFliDecode(Imaging im, ImagingCodecState state, UINT8 *buf, Py_ssize_t byt
break; break;
case 16: case 16:
/* COPY chunk */ /* COPY chunk */
if (INT32_MAX / state->xsize < state->ysize) { if (INT32_MAX < (uint64_t)state->xsize * state->ysize) {
/* Integer overflow, bail */ /* Integer overflow, bail */
state->errcode = IMAGING_CODEC_OVERRUN; state->errcode = IMAGING_CODEC_OVERRUN;
return -1; return -1;