Add bounds check in Jp2Image::doWriteMetadata().

Exiv2 · Apr 23, 2021 · e6a0982 · e6a0982
1 parent f0ff11f
commit e6a0982
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/jp2image.cpp b/src/jp2image.cpp
@@ -908,6 +908,7 @@ static void boxes_check(size_t b,size_t m)
 
                 case kJp2BoxTypeUuid:
                 {
+                    enforce(boxBuf.size_ >= 24, Exiv2::kerCorruptedMetadata);
                     if(memcmp(boxBuf.pData_ + 8, kJp2UuidExif, 16) == 0)
                     {
 #ifdef EXIV2_DEBUG_MESSAGES