mirror of
https://github.com/webmproject/libwebp.git
synced 2024-12-25 13:18:22 +01:00
Merge "Properly check the data size against the end of the RIFF chunk" into main
This commit is contained in:
commit
1b4c967fbb
@ -223,6 +223,8 @@ WebPMux* WebPMuxCreateInternal(const WebPData* bitstream, int copy_data,
|
||||
// Note this padding is historical and differs from demux.c which does not
|
||||
// pad the file size.
|
||||
riff_size = SizeWithPadding(riff_size);
|
||||
// Make sure the whole RIFF header is available.
|
||||
if (riff_size < RIFF_HEADER_SIZE) goto Err;
|
||||
if (riff_size > size) goto Err;
|
||||
// There's no point in reading past the end of the RIFF chunk. Note riff_size
|
||||
// includes CHUNK_HEADER_SIZE after SizeWithPadding().
|
||||
|
Loading…
Reference in New Issue
Block a user