Enlightenment CVS committal Author : raster Project : e17 Module : libs/evas
Dir : e17/libs/evas/src/modules/loaders/edb Modified Files: evas_image_load_edb.c Log Message: check dimensions for safety =================================================================== RCS file: /cvs/e/e17/libs/evas/src/modules/loaders/edb/evas_image_load_edb.c,v retrieving revision 1.4 retrieving revision 1.5 diff -u -3 -r1.4 -r1.5 --- evas_image_load_edb.c 28 Oct 2006 03:02:21 -0000 1.4 +++ evas_image_load_edb.c 5 Nov 2006 05:07:52 -0000 1.5 @@ -57,14 +57,15 @@ } w = header[1]; h = header[2]; - alpha = header[3]; - compression = header[4]; - if ((w > 8192) || (h > 8192)) + if ((w < 1) || (h < 1) || (w > 8192) || (h > 8192)) { free(ret); e_db_close(db); return 0; } + alpha = header[3]; + compression = header[4]; + if ((compression == 0) && (size < ((w * h * 4) + 32))) { free(ret); @@ -127,14 +128,16 @@ } w = header[1]; h = header[2]; - alpha = header[3]; - compression = header[4]; - if ((w > 8192) || (h > 8192)) + if ((w < 1) || (h < 1) || (w > 8192) || (h > 8192)) { free(ret); e_db_close(db); return 0; } + + alpha = header[3]; + compression = header[4]; + if ((compression == 0) && (size < ((w * h * 4) + 32))) { free(ret); ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ enlightenment-cvs mailing list enlightenment-cvs@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/enlightenment-cvs