14 lines
340 B
Diff
14 lines
340 B
Diff
--- IMG_gif.c
|
|
+++ IMG_gif.c
|
|
@@ -418,6 +418,10 @@
|
|
static int stack[(1 << (MAX_LWZ_BITS)) * 2], *sp;
|
|
register int i;
|
|
|
|
+ /* Fixed buffer overflow found by Michael Skladnikiewicz */
|
|
+ if (input_code_size > MAX_LWZ_BITS)
|
|
+ return -1;
|
|
+
|
|
if (flag) {
|
|
set_code_size = input_code_size;
|
|
code_size = set_code_size + 1;
|