move out of bounds check inside loop

Fixes OSS-Fuzz 45899 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45899 Signed-off-by: Kimball Thurston <[email protected]>
AcademySoftwareFoundation · Apr 1, 2022 · e2919b5 · e2919b5
1 parent 3b0aaaa
commit e2919b5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/lib/OpenEXRCore/parse_header.c b/src/lib/OpenEXRCore/parse_header.c
@@ -2159,9 +2159,10 @@ internal_exr_compute_chunk_offset_size (struct _internal_exr_part* curpart)
                         tilecount +=
                             ((int64_t) curpart->tile_level_tile_count_x[lx] *
                              (int64_t) curpart->tile_level_tile_count_y[ly]);
+
+                        if (tilecount > (int64_t) INT_MAX) return -1;
                     }
                 }
-                if (tilecount > (int64_t) INT_MAX) return -1;
                 retval = (int32_t) tilecount;
                 break;
             case EXR_TILE_LAST_TYPE: