mirror/kimageformats
1
0
Fork 0
mirror of https://invent.kde.org/frameworks/kimageformats.git synced 2025-06-03 17:08:08 -04:00
Code Issues Packages Projects Releases Wiki Activity

ras: protect the palette QVector too

Browse Source 
oss-fuzz/13068
This commit is contained in:
Albert Astals Cid 2019-02-13 23:50:36 +01:00
parent d79c11d280
commit 156bac5e54
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/imageformats/ras.cpp
View File

@ -102,6 +102,13 @@ static bool IsSupported(const RasHeader &head)
static bool LoadRAS(QDataStream &s, const RasHeader &ras, QImage &img) static bool LoadRAS(QDataStream &s, const RasHeader &ras, QImage &img)
{ {
s.device()->seek(RasHeader::SIZE); s.device()->seek(RasHeader::SIZE);
// QVector uses some extra space for stuff, hence the 32 here suggested by thiago
if (ras.ColorMapLength > std::numeric_limits<int>::max() - 32) {
qWarning() << "LoadRAS() unsupported image color map length in file header" << ras.ColorMapLength;
return false;
}
// Read palette if needed. // Read palette if needed.
QVector<quint8> palette(ras.ColorMapLength); QVector<quint8> palette(ras.ColorMapLength);
if (ras.ColorMapType == 1) { if (ras.ColorMapType == 1) {