Enlightenment CVS committal Author : raster Project : e17 Module : libs/evas
Dir : e17/libs/evas/src/modules/loaders/jpeg Modified Files: evas_image_load_jpeg.c Log Message: check dimensions for safety =================================================================== RCS file: /cvs/e/e17/libs/evas/src/modules/loaders/jpeg/evas_image_load_jpeg.c,v retrieving revision 1.5 retrieving revision 1.6 diff -u -3 -r1.5 -r1.6 --- evas_image_load_jpeg.c 28 Oct 2006 03:02:22 -0000 1.5 +++ evas_image_load_jpeg.c 5 Nov 2006 05:07:52 -0000 1.6 @@ -101,6 +101,11 @@ } w = cinfo.output_width; h = cinfo.output_height; + if ((w < 1) || (h < 1) || (w > 8192) || (h > 8192)) + { + jpeg_destroy_decompress(&cinfo); + return 0; + } if (im->load_opts.scale_down_by > 1) { w /= im->load_opts.scale_down_by; ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ enlightenment-cvs mailing list enlightenment-cvs@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/enlightenment-cvs