From 612586e2c8fed142f9ede711bcb6c386a4ddf26d Mon Sep 17 00:00:00 2001 From: Minje Ahn Date: Wed, 22 Apr 2020 10:51:00 +0900 Subject: [PATCH] Check size before allocation Change-Id: Ie50555a55b2d8abc35321ccafd344b7416ac595f Signed-off-by: Minje Ahn --- src/common/media-svc-util.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/common/media-svc-util.c b/src/common/media-svc-util.c index ee90b15..02fc585 100644 --- a/src/common/media-svc-util.c +++ b/src/common/media-svc-util.c @@ -848,7 +848,8 @@ static int __image_360_check(const char *path) goto ERROR; exif_app1_xmp_size = (long)((exif_app1_xmp_t[0] << 8) | (exif_app1_xmp_t[1])) - 2; - + if (exif_app1_xmp_size == 0) + goto ERROR; xmp_data = g_malloc(exif_app1_xmp_size); ptr = xmp_data; -- 2.7.4