Bug #1277 » cr2_crash_fix.diff
exiv2-0.26/src/image.cpp 2017-02-13 14:04:44.719463129 -0500 | ||
---|---|---|
392 | 392 |
: 1 |
393 | 393 |
; |
394 | 394 | |
395 |
// Break for unknown tag types else we may get segfault. |
|
396 |
if (type == 0) { |
|
397 |
break; |
|
398 |
} |
|
399 | ||
395 | 400 |
// if ( offset > io.size() ) offset = 0; // Denial of service? |
396 | 401 |
int buffer_size = size*count + pad; |
397 | 402 |
if (buffer_size < 4) buffer_size = 4; |