python-pillow/Pillow
1
1
Fork 0
mirror of https://github.com/python-pillow/Pillow.git synced 2025-01-13 10:46:16 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fixed DOS with invalid BMP size entries

Browse Source
This commit is contained in:
wiredfool 2014-01-31 21:33:24 -08:00
parent 3ea93e5de5
commit 88d0e6080a
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
PIL/BmpImagePlugin.py
View File

@ -99,6 +99,10 @@ class BmpImageFile(ImageFile.ImageFile):
else: else:
raise IOError("Unsupported BMP header type (%d)" % len(s)) raise IOError("Unsupported BMP header type (%d)" % len(s))
if (self.size[0]*self.size[1]) > 2**31:
# Prevent DOS for > 2gb images
raise IOError("Unsupported BMP Size: (%dx%d)" % self.size)
if not colors: if not colors:
colors = 1 << bits colors = 1 << bits