mirror/kimageformats
1
0
Fork 0
mirror of https://invent.kde.org/frameworks/kimageformats.git synced 2025-07-18 03:54:18 -04:00
Code Issues Packages Projects Releases Wiki Activity

ras: Fix assert because of ColorMapLength being too big

Browse Source 
oss-fuzz/12785
This commit is contained in:
Albert Astals Cid
2019-01-31 01:02:57 +01:00
parent c2d2a9be66
commit de7a9a8457
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/imageformats/ras.cpp
View File

@ -251,6 +251,10 @@ bool RASHandler::read(QImage *outImage)
// Read image header. // Read image header.
RasHeader ras; RasHeader ras;
s >> ras; s >> ras;
if (ras.ColorMapLength > std::numeric_limits<int>::max())
return false;
// TODO: add support for old versions of RAS where Length may be zero in header // TODO: add support for old versions of RAS where Length may be zero in header
s.device()->seek(RasHeader::SIZE + ras.Length + ras.ColorMapLength); s.device()->seek(RasHeader::SIZE + ras.Length + ras.ColorMapLength);