mewin/libpng
1
0
Fork 0
mirror of https://git.code.sf.net/p/libpng/code.git synced 2025-07-10 18:04:09 +02:00
Code Issues Projects Releases Wiki Activity

[libpng16] Another whack at png_handle_sPLT() pointer calculation.

Browse Source
This commit is contained in:
John Bowler 2015-11-19 20:44:07 -06:00 committed by Glenn Randers-Pehrson
parent 4db6127658
commit 1ceedd0bf6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pngrutil.c
View File

@ -1670,7 +1670,7 @@ png_handle_sPLT(png_structrp png_ptr, png_inforp info_ptr, png_uint_32 length)
++entry_start;
/* A sample depth should follow the separator, and we should be on it */
if (length < 2 || entry_start - buffer > length - 2)
if (length < 2 || entry_start > buffer + (length - 2U))
{
png_warning(png_ptr, "malformed sPLT chunk");
return;