Fix missing guard check (#1329)

Addresses OSS-FUZZ https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52730 Signed-off-by: Kimball Thurston <kdt3rd@gmail.com>
AcademySoftwareFoundation · Feb 2, 2023 · 063a881 · 063a881
1 parent 436fcd2
commit 063a881
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/src/lib/OpenEXRCore/internal_huf.c b/src/lib/OpenEXRCore/internal_huf.c
@@ -1280,9 +1280,21 @@ fasthuf_initialize (
             codeCount[codeLen]++;
         }
         else if (codeLen == (uint64_t) LONG_ZEROCODE_RUN)
+        {
+            if (currByte >= topByte)
+            {
+                if (pctxt)
+                    pctxt->print_error (
+                        pctxt,
+                        EXR_ERR_CORRUPT_CHUNK,
+                        "Error decoding Huffman table (Truncated table data).");
+                return EXR_ERR_CORRUPT_CHUNK;
+            }
+
             symbol +=
                 fasthuf_read_bits (8, &currBits, &currBitCount, &currByte) +
                 SHORTEST_LONG_RUN - 1;
+        }
         else
             symbol += codeLen - SHORT_ZEROCODE_RUN + 1;