third_party/exiv2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix division by zero in BigTiffImage::printIFD

Browse Source 
This fixes #262
This commit is contained in:
Dan Čermák 2018-09-03 21:14:16 +02:00
parent 03799c75e1
commit b3199a0720
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/bigtiffimage.cpp
View File

@ -251,8 +251,12 @@ namespace Exiv2
// size * count > std::numeric_limits<uint64_t>::max()
// =>
// size > std::numeric_limits<uint64_t>::max() / count
if (size > std::numeric_limits<uint64_t>::max() / count)
throw Error(kerInvalidMalloc); // we got number bigger than 2^64
// (don't perform that check when count == 0 => will cause a division by zero exception)
if (count != 0) {
if (size > std::numeric_limits<uint64_t>::max() / count) {
throw Error(kerInvalidMalloc); // we got number bigger than 2^64
}
}
// more than we can handle
if (size * count > std::numeric_limits<uint64_t>::max() - pad)