sergiotarxz/libvips
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fix a crash found by oss-fuzz

Browse Source
This commit is contained in:
John Cupitt 2021-04-22 23:02:34 +01:00
parent ee2255da00
commit 83c4e56cfb
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
libvips/foreign/libnsgif/lzw.c
View File

@ -347,8 +347,12 @@ static inline lzw_result lzw__decode(struct lzw_ctx *ctx,
} else if (code == ctx->clear_code) {
lzw__clear_table(ctx);
} else {
if (ctx->prev_code != ctx->clear_code &&
ctx->table_size < LZW_TABLE_ENTRY_MAX) {
if (ctx->prev_code == ctx->clear_code) {
if (code > ctx->clear_code) {
return LZW_BAD_ICODE;
}
} else if (ctx->table_size < LZW_TABLE_ENTRY_MAX) {
uint32_t size = ctx->table_size;
lzw__table_add_entry(ctx, (code < size) ?
ctx->table[code].first :