From 136ee686be199d0971e90eb67bbf08ac0a2a9824 Mon Sep 17 00:00:00 2001 From: Nicholas Guriev Date: Tue, 25 May 2021 14:12:31 +0300 Subject: [PATCH] Skip dash array of size one or zero An attempt to fix CVE-2021-31317, not tested yet. Change-Id: Ib9a061ddc6c2136082f9f79ff35101fb6d5cf0b5 --- src/lottie/lottiemodel.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lottie/lottiemodel.cpp b/src/lottie/lottiemodel.cpp index e2b48e6..9da82f7 100644 --- a/src/lottie/lottiemodel.cpp +++ b/src/lottie/lottiemodel.cpp @@ -205,7 +205,7 @@ void model::Dash::getDashInfo(int frameNo, std::vector &result) const { result.clear(); - if (mData.empty()) return; + if (mData.size() <= 1) return; if (result.capacity() < mData.size()) result.reserve(mData.size() + 1); -- 2.34.1