diff options
| author | Adrian Johnson <ajohnson@redneon.com> | 2017-06-15 20:53:29 +0930 |
|---|---|---|
| committer | Bryce Harrington <bryce@osg.samsung.com> | 2017-06-15 14:54:46 -0700 |
| commit | c467f458b14196e699ff104f22b1531b67ba919e (patch) | |
| tree | ccd27a2611e5a9e1fa385b0c4fe8e96583b35a36 | |
| parent | e2ab1c608fcb54d86ac30852aec4cac36ef1e577 (diff) | |
| download | cairo-c467f458b14196e699ff104f22b1531b67ba919e.tar.gz | |
Fix off by one check in cairo-image-info.c
https://bugs.freedesktop.org/show_bug.cgi?id=101427
| -rw-r--r-- | src/cairo-image-info.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/cairo-image-info.c b/src/cairo-image-info.c index 26e7ae5af..d147e3723 100644 --- a/src/cairo-image-info.c +++ b/src/cairo-image-info.c @@ -137,7 +137,7 @@ _cairo_image_info_get_jpeg_info (cairo_image_info_t *info, break; } - if (p + 2 > data + length) + if (p + 3 > data + length) return CAIRO_INT_STATUS_UNSUPPORTED; p = _jpeg_skip_segment (p); |