Skip dash array of size one or zero accepted/tizen/unified/20210610.141304 submit/tizen/20210531.030446 submit/tizen/20210531.031901
authorNicholas Guriev <nicholas@guriev.su>
Tue, 25 May 2021 11:12:31 +0000 (14:12 +0300)
committerHermet Park <chuneon.park@samsung.com>
Mon, 31 May 2021 02:46:50 +0000 (11:46 +0900)
An attempt to fix CVE-2021-31317, not tested yet.

Change-Id: Ib9a061ddc6c2136082f9f79ff35101fb6d5cf0b5

src/lottie/lottiemodel.cpp

index e2b48e64bd5134ef4ae01f92b58bfc2293a0c39f..9da82f704bcd3e7bdb12efb8f3eee104ff096ca7 100644 (file)
@@ -205,7 +205,7 @@ void model::Dash::getDashInfo(int frameNo, std::vector<float> &result) const
 {
     result.clear();
 
-    if (mData.empty()) return;
+    if (mData.size() <= 1) return;
 
     if (result.capacity() < mData.size()) result.reserve(mData.size() + 1);