shithub: jbig2

Info  •  Files  •  Log  •  Branches

jbig2dec: Validate range of Huffman Table range values.

Detected by Coverity in CID 94835.

--- a/jbig2_huffman.c

+++ b/jbig2_huffman.c

@@ -583,6 +583,11 @@

                     code_table_flags, HTOOB, HTPS, HTRS, HTLOW, HTHIGH);

 #endif

+        if (HTLOW >= HTHIGH) {

+            jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "invalid Huffman Table range");

+            goto error_exit;

+        }

+

         /* allocate HuffmanParams & HuffmanLine */

         params = jbig2_new(ctx, Jbig2HuffmanParams, 1);

         if (params == NULL) {