python-pillow/Pillow
1
1
Fork 0
mirror of https://github.com/python-pillow/Pillow.git synced 2025-11-02 00:47:33 +03:00
Code Issues Packages Projects Releases Wiki Activity

Check all reserved bytes in FLI header (#9183)

Browse Source
This commit is contained in:
Hugo van Kemenade 2025-10-04 11:02:10 +03:00 committed by GitHub
commit a2e2939240
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
Tests/images/crash-5762152299364352.fli
View File

Binary file not shown.

BIN
Tests/images/timeout-9139147ce93e20eb14088fe238e541443ffd64b3.fli
View File

Binary file not shown.

BIN
Tests/images/timeout-bff0a9dc7243a8e6ede2408d2ffa6a9964698b87.fli
View File

Binary file not shown.

7
src/PIL/FliImagePlugin.py
View File

@ -49,7 +49,12 @@ class FliImageFile(ImageFile.ImageFile):
def _open(self) -> None: def _open(self) -> None:
# HEAD # HEAD
s = self.fp.read(128) s = self.fp.read(128)
if not (_accept(s) and s[20:22] == b"\x00\x00"): if not (
_accept(s)
and s[20:22] == b"\x00" * 2
and s[42:80] == b"\x00" * 38
and s[88:] == b"\x00" * 40
):
msg = "not an FLI/FLC file" msg = "not an FLI/FLC file"
raise SyntaxError(msg) raise SyntaxError(msg)