Fix integer overflow in CubeSize()

mm2 · mm2 · commit da6110b1d14a · 2026-02-19T09:07:20.000+01:00
Thanks to @zerojackyi for reporting
diff --git a/src/cmslut.c b/src/cmslut.c
@@ -460,7 +460,8 @@ void EvaluateCLUTfloatIn16(const cmsFloat32Number In[], cmsFloat32Number Out[],
 static
 cmsUInt32Number CubeSize(const cmsUInt32Number Dims[], cmsUInt32Number b)
 {
-    cmsUInt32Number rv, dim;
+    cmsUInt32Number dim;
+    cmsUInt64Number rv;
 
     _cmsAssert(Dims != NULL);
 

Original file line number	Diff line number	Diff line change
`@@ -460,7 +460,8 @@ void EvaluateCLUTfloatIn16(const cmsFloat32Number In[], cmsFloat32Number Out[],`
`460`	`460`	`static`
`461`	`461`	`cmsUInt32Number CubeSize(const cmsUInt32Number Dims[], cmsUInt32Number b)`
`462`	`462`	`{`
`463`		`- cmsUInt32Number rv, dim;`
	`463`	`+ cmsUInt32Number dim;`
	`464`	`+ cmsUInt64Number rv;`
`464`	`465`
`465`	`466`	`_cmsAssert(Dims != NULL);`
`466`	`467`