python-pillow/Pillow
1
1
Fork 0
mirror of https://github.com/python-pillow/Pillow.git synced 2024-11-15 06:07:33 +03:00
Code Issues Packages Projects Releases Wiki Activity

Prevent division by zero

Browse Source
This commit is contained in:
Andrew Murray 2024-09-23 23:25:42 +10:00
parent 7e6e08ea6a
commit fc65e437cf
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/libImaging/FliDecode.c
View File

@ -224,7 +224,7 @@ ImagingFliDecode(Imaging im, ImagingCodecState state, UINT8 *buf, Py_ssize_t byt
break; break;
case 16: case 16:
/* COPY chunk */ /* COPY chunk */
if (INT32_MAX / state->xsize < state->ysize) { if (INT32_MAX < (uint64_t)state->xsize * state->ysize) {
/* Integer overflow, bail */ /* Integer overflow, bail */
state->errcode = IMAGING_CODEC_OVERRUN; state->errcode = IMAGING_CODEC_OVERRUN;
return -1; return -1;