Skip to content

Commit 26ec395

Browse files
committed
fix #1042 (EXIF offset larger than data)
1 parent 4332b48 commit 26ec395

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

examples/encoder_jpeg.cc

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -178,6 +178,11 @@ bool JpegEncoder::Encode(const struct heif_image_handle* handle,
178178
uint32_t skip = (exifdata[0]<<24) | (exifdata[1]<<16) | (exifdata[2]<<8) | exifdata[3];
179179
skip += 4;
180180

181+
if (skip > exifsize) {
182+
fprintf(stderr, "Invalid EXIF data (offset too large)\n");
183+
return false;
184+
}
185+
181186
uint8_t* ptr = exifdata + skip;
182187
size_t size = exifsize - skip;
183188

0 commit comments

Comments
 (0)