Skip to content

Commit d072ed6

Browse files
committed
Skip MNG CLIP chunk with out-of-range object IDs
1 parent 82e3b7c commit d072ed6

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

Diff for: coders/png.c

+3
Original file line numberDiff line numberDiff line change
@@ -5899,6 +5899,9 @@ static Image *ReadOneMNGImage(MngInfo* mng_info, const ImageInfo *image_info,
58995899

59005900
for (i=(int) first_object; i <= (int) last_object; i++)
59015901
{
5902+
if ((i < 0) || (i >= MNG_MAX_OBJECTS))
5903+
continue;
5904+
59025905
if (mng_info->exists[i] && !mng_info->frozen[i])
59035906
{
59045907
MngBox

0 commit comments

Comments
 (0)