enlightenment/efl
enlightenment
/
efl
8
7
Fork 14
Code Issues 13 Pull Requests 3 Projects Releases Wiki Activity

if somebody make corrupted bmp file, it can cause crash 

SVN revision: 80225
This commit is contained in:
Jiyoun Park 2012-12-05 09:58:56 +00:00
parent edbf3d90c1
commit aa53580814
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/modules/evas/loaders/bmp/evas_image_load_bmp.c
View File

@ -135,6 +135,7 @@ evas_image_load_file_head_bmp(Image_Entry *ie, const char *file, const char *key
if (!read_ushort(map, fsize, &position, &res2)) goto close_file;
if (!read_uint(map, fsize, &position, &offset)) goto close_file;
if (!read_uint(map, fsize, &position, &head_size)) goto close_file;
if (offset > fsize) goto close_file;
if (head_size == 12) // OS/2 V1 + Windows 3.0
{
short tmp;
@ -424,6 +425,7 @@ evas_image_load_file_data_bmp(Image_Entry *ie, const char *file, const char *key
if (!read_ushort(map, fsize, &position, &res2)) goto close_file;
if (!read_uint(map, fsize, &position, &offset)) goto close_file;
if (!read_uint(map, fsize, &position, &head_size)) goto close_file;
if (offset > fsize) goto close_file;
image_size = fsize - offset;
if (image_size < 1) goto close_file;