Fix integer overflow #2179

Exiv2 · Mar 31, 2022 · 62e090a · 62e090a
1 parent 790fc46
commit 62e090a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/jpgimage.cpp b/src/jpgimage.cpp
@@ -182,6 +182,7 @@ DataBuf Photoshop::setIptcIrb(const byte* pPsData, size_t sizePsData, const Iptc
   // Write existing stuff after record,
   // skip the current and all remaining IPTC blocks
   size_t pos = sizeFront;
+  enforce(pos <= sizePsData, ErrorCode::kerCorruptedMetadata);
   while (0 == Photoshop::locateIptcIrb(pPsData + pos, sizePsData - pos, &record, &sizeHdr, &sizeIptc)) {
     const auto newPos = static_cast<size_t>(record - pPsData);
     // Copy data up to the IPTC IRB