OpenFileGDB: avoid harmless unsigned integer overflow (master only) (…

…ossfuzz#69618)
OSGeo · Jun 14, 2024 · 5481008 · 5481008
1 parent 6c8342e
commit 5481008
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ogr/ogrsf_frmts/openfilegdb/filegdbtable.cpp b/ogr/ogrsf_frmts/openfilegdb/filegdbtable.cpp
@@ -747,6 +747,10 @@ bool FileGDBTable::ReadTableXHeaderV4()
     m_nTablxOffsetSize = GetUInt32(abyHeader + 12, 0);
     returnErrorIf(m_nTablxOffsetSize < 4 || m_nTablxOffsetSize > 6);
 
+    returnErrorIf(m_n1024BlocksPresent >
+                  (std::numeric_limits<vsi_l_offset>::max() - 16) /
+                      (m_nTablxOffsetSize * 1024));
+
     m_nOffsetTableXTrailer =
         16 + m_nTablxOffsetSize * 1024 *
                  static_cast<vsi_l_offset>(m_n1024BlocksPresent);