diff options
author | Minje Ahn <minje.ahn@samsung.com> | 2020-04-22 10:51:00 +0900 |
---|---|---|
committer | Minje Ahn <minje.ahn@samsung.com> | 2020-04-22 10:51:00 +0900 |
commit | 612586e2c8fed142f9ede711bcb6c386a4ddf26d (patch) | |
tree | fff6d0afe9eb5af93678741531815cff6db962ec | |
parent | b78753b613917d97aec19bb464b5a08bf7cfed6d (diff) | |
download | libmedia-service-612586e2c8fed142f9ede711bcb6c386a4ddf26d.tar.gz libmedia-service-612586e2c8fed142f9ede711bcb6c386a4ddf26d.tar.bz2 libmedia-service-612586e2c8fed142f9ede711bcb6c386a4ddf26d.zip |
Check size before allocationsubmit/tizen/20200422.001719accepted/tizen/unified/20200422.215425
Change-Id: Ie50555a55b2d8abc35321ccafd344b7416ac595f
Signed-off-by: Minje Ahn <minje.ahn@samsung.com>
-rw-r--r-- | src/common/media-svc-util.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/common/media-svc-util.c b/src/common/media-svc-util.c index ee90b15..02fc585 100644 --- a/src/common/media-svc-util.c +++ b/src/common/media-svc-util.c @@ -848,7 +848,8 @@ static int __image_360_check(const char *path) goto ERROR; exif_app1_xmp_size = (long)((exif_app1_xmp_t[0] << 8) | (exif_app1_xmp_t[1])) - 2; - + if (exif_app1_xmp_size == 0) + goto ERROR; xmp_data = g_malloc(exif_app1_xmp_size); ptr = xmp_data; |