changeset 1861:e96cac97175a

fixed crash on incomplete jpeg file
author Vladimir Nadvornik <nadvornik@suse.cz>
date Fri, 29 Jul 2011 15:27:09 +0200
parents 01a8b98abf09
children 162b7dc63b67
files src/image_load_jpeg.c
diffstat 1 files changed, 5 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/image_load_jpeg.c	Sat May 14 22:16:49 2011 +0200
+++ b/src/image_load_jpeg.c	Fri Jul 29 15:27:09 2011 +0200
@@ -234,7 +234,11 @@
 {
 	struct jpeg_source_mgr* src = (struct jpeg_source_mgr*) cinfo->src;
 
-	if (num_bytes > 0) 
+	if (num_bytes > src->bytes_in_buffer)
+		{
+		ERREXIT(cinfo, JERR_INPUT_EOF);
+		}
+	else if (num_bytes > 0) 
 		{
 		src->next_input_byte += (size_t) num_bytes;
 		src->bytes_in_buffer -= (size_t) num_bytes;