# HG changeset patch # User Vladimir Nadvornik # Date 1311946029 -7200 # Node ID e96cac97175a0f9578bf270d11f26c545f7e9577 # Parent 01a8b98abf099eac0beabf0a4163646ed66f1fea fixed crash on incomplete jpeg file diff -r 01a8b98abf09 -r e96cac97175a src/image_load_jpeg.c --- a/src/image_load_jpeg.c Sat May 14 22:16:49 2011 +0200 +++ b/src/image_load_jpeg.c Fri Jul 29 15:27:09 2011 +0200 @@ -234,7 +234,11 @@ { struct jpeg_source_mgr* src = (struct jpeg_source_mgr*) cinfo->src; - if (num_bytes > 0) + if (num_bytes > src->bytes_in_buffer) + { + ERREXIT(cinfo, JERR_INPUT_EOF); + } + else if (num_bytes > 0) { src->next_input_byte += (size_t) num_bytes; src->bytes_in_buffer -= (size_t) num_bytes;