Enlightenment CVS committal Author : raster Project : e17 Module : libs/evas
Dir : e17/libs/evas/src/modules/loaders/svg Modified Files: evas_image_load_svg.c Log Message: check dimensions for safety =================================================================== RCS file: /cvs/e/e17/libs/evas/src/modules/loaders/svg/evas_image_load_svg.c,v retrieving revision 1.10 retrieving revision 1.11 diff -u -3 -r1.10 -r1.11 --- evas_image_load_svg.c 28 Oct 2006 03:02:22 -0000 1.10 +++ evas_image_load_svg.c 5 Nov 2006 05:07:53 -0000 1.11 @@ -73,6 +73,12 @@ rsvg_handle_get_dimensions(rsvg, &dim); w = dim.width; h = dim.height; + if ((w < 1) || (h < 1) || (w > 8192) || (h > 8192)) + { + rsvg_handle_free(rsvg); + chdir(pcwd); + return 0; + } if (im->load_opts.scale_down_by > 1) { w /= im->load_opts.scale_down_by; @@ -143,6 +149,12 @@ rsvg_handle_get_dimensions(rsvg, &dim); w = dim.width; h = dim.height; + if ((w < 1) || (h < 1) || (w > 8192) || (h > 8192)) + { + rsvg_handle_free(rsvg); + chdir(pcwd); + return 0; + } if (im->load_opts.scale_down_by > 1) { w /= im->load_opts.scale_down_by; ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ enlightenment-cvs mailing list enlightenment-cvs@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/enlightenment-cvs