check for bad bit counts in Huff encoded data

Signed-off-by: Peter Hillman <[email protected]>
AcademySoftwareFoundation · Feb 4, 2020 · 801272c · 801272c
1 parent 7a52d40
commit 801272c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/OpenEXR/IlmImf/ImfHuf.cpp b/OpenEXR/IlmImf/ImfHuf.cpp
@@ -1070,6 +1070,11 @@ hufUncompress (const char compressed[],
 
     const char *ptr = compressed + 20;
 
+    if ( ptr + (nBits+7 )/8 > compressed+nCompressed)
+    {
+        throw Iex::InputExc("invalid bit count for data size in Huf data");
+    }
+
     // 
     // Fast decoder needs at least 2x64-bits of compressed data, and
     // needs to be run-able on this platform. Otherwise, fall back