From 6605513d24e49c1276ce4476cd037f714c05244b Mon Sep 17 00:00:00 2001
From: Thomas Bernard <miniupnp@free.fr>
Date: Wed, 18 Nov 2020 01:21:23 +0100
Subject: tiff2pdf: Check output size before writing

fixes #156
---
 tools/tiff2pdf.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/tools/tiff2pdf.c b/tools/tiff2pdf.c
index e7899f6a..e77294b3 100644
--- a/tools/tiff2pdf.c
+++ b/tools/tiff2pdf.c
@@ -3329,6 +3329,14 @@ tsize_t t2p_readwrite_pdf_image_tile(T2P* t2p, TIFF* input, TIFF* output, ttile_
 		break;
 	}
 
+	if (TIFFStripSize(output) > t2p->tiff_datasize) {
+		TIFFError(TIFF2PDF_MODULE,
+		         "Size mismatch input %ld, output %ld",
+		          t2p->tiff_datasize, TIFFStripSize(output));
+		_TIFFfree(buffer);
+		t2p->t2p_error = T2P_ERR_ERROR;
+		return(0);
+	}
 	t2p_enable(output);
 	t2p->outputwritten = 0;
 	bufferoffset = TIFFWriteEncodedStrip(output, (tstrip_t) 0, buffer,
-- 
cgit v1.2.1