specific check for bad size field in header attributes (related to #248)

AcademySoftwareFoundation · Jul 11, 2019 · 4c146c5 · 4c146c5
1 parent eda733c
commit 4c146c5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/OpenEXR/IlmImf/ImfHeader.cpp b/OpenEXR/IlmImf/ImfHeader.cpp
@@ -1185,6 +1185,11 @@ Header::readFrom (OPENEXR_IMF_INTERNAL_NAMESPACE::IStream &is, int &version)
 	checkIsNullTerminated (typeName, "attribute type name");
 	OPENEXR_IMF_INTERNAL_NAMESPACE::Xdr::read <OPENEXR_IMF_INTERNAL_NAMESPACE::StreamIO> (is, size);
 
+    if( size < 0 )
+    {
+        throw IEX_NAMESPACE::InputExc("Invalid size field in header attribute");
+    }
+
 	AttributeMap::iterator i = _map.find (name);
 
 	if (i != _map.end())