windowscodecs: Check for overflow in jpeg_decoder_initialize.

Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=56590

windowscodecs: Check for overflow in jpeg_decoder_initialize.
538ef6a5 · Esme Povirk · Alexandre Julliard · e7225aaa · 538ef6a5
Commit 538ef6a5 authored Apr 27, 2024 by Esme Povirk Committed by Alexandre Julliard Apr 29, 2024
Show whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

libjpeg.c dlls/windowscodecs/libjpeg.c +4 -0

No files found.
--- a/dlls/windowscodecs/libjpeg.c
+++ b/dlls/windowscodecs/libjpeg.c
@@ -248,6 +248,10 @@ static HRESULT CDECL jpeg_decoder_initialize(struct decoder* iface, IStream *str
    This->stride = (This->frame.bpp * This->cinfo.output_width + 7) / 8;
    data_size = This->stride * This->cinfo.output_height;

+    if (data_size / This->stride < This->cinfo.output_height)
+        /* overflow in multiplication */
+        return E_OUTOFMEMORY;
+
    This->image_data = malloc(data_size);
    if (!This->image_data)
        return E_OUTOFMEMORY;