Enlightenment CVS committal Author : raster Project : e17 Module : libs/evas
Dir : e17/libs/evas/src/modules/loaders/gif Modified Files: evas_image_load_gif.c Log Message: check dimensions for safety =================================================================== RCS file: /cvs/e/e17/libs/evas/src/modules/loaders/gif/evas_image_load_gif.c,v retrieving revision 1.4 retrieving revision 1.5 diff -u -3 -r1.4 -r1.5 --- evas_image_load_gif.c 28 Oct 2006 03:02:22 -0000 1.4 +++ evas_image_load_gif.c 5 Nov 2006 05:07:52 -0000 1.5 @@ -67,13 +67,18 @@ } w = gif->Image.Width; h = gif->Image.Height; - done = 1; + if ((w < 1) || (h < 1) || (w > 8192) || (h > 8192)) + { + DGifCloseFile(gif); + return 0; + } + done = 1; } else if (rec == EXTENSION_RECORD_TYPE) { int ext_code; GifByteType *ext; - + ext = NULL; DGifGetExtension(gif, &ext_code, &ext); while (ext) ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ enlightenment-cvs mailing list enlightenment-cvs@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/enlightenment-cvs