From efc360fc17935453e95f62939dd5d7caacce4bf7 Mon Sep 17 00:00:00 2001 From: Kimball Thurston Date: Sun, 29 Jul 2018 13:08:54 +1200 Subject: [PATCH] fixes #260, out of bounds vector access noticed by Google Autofuzz Signed-off-by: Kimball Thurston --- OpenEXR/IlmImf/ImfScanLineInputFile.cpp | 2 ++ 1 file changed, 2 insertions(+) diff --git a/OpenEXR/IlmImf/ImfScanLineInputFile.cpp b/OpenEXR/IlmImf/ImfScanLineInputFile.cpp index 35b5ed4d0..d07005d39 100644 --- a/OpenEXR/IlmImf/ImfScanLineInputFile.cpp +++ b/OpenEXR/IlmImf/ImfScanLineInputFile.cpp @@ -375,6 +375,8 @@ readPixelData (InputStreamMutex *streamData, // int lineBufferNumber = (minY - ifd->minY) / ifd->linesInBuffer; + if (lineBufferNumber < 0 || lineBufferNumber >= int(ifd->lineOffsets.size())) + THROW (IEX_NAMESPACE::InputExc, "Invalid scan line " << minY << " requested or missing."); Int64 lineOffset = ifd->lineOffsets[lineBufferNumber];