summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMarcus Meissner <marcus@jet.franken.de>2019-12-30 08:44:47 +0100
committerMarcus Meissner <marcus@jet.franken.de>2019-12-30 08:44:47 +0100
commit7ea83d5dc8d6d58aff008e62e240727c70c67e19 (patch)
tree81fccd96b55b1a0c7f825a7a5b3aee6a70ee5c2a
parentda3ee3312e36bf27c1c03d1f6ccce8d79355a732 (diff)
downloadlibgphoto2-7ea83d5dc8d6d58aff008e62e240727c70c67e19.tar.gz
check buffer length after read, if we read the full buffer (AFL)
-rw-r--r--camlibs/soundvision/agfa_cl18.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/camlibs/soundvision/agfa_cl18.c b/camlibs/soundvision/agfa_cl18.c
index d97bb331b..d8cfdb9e1 100644
--- a/camlibs/soundvision/agfa_cl18.c
+++ b/camlibs/soundvision/agfa_cl18.c
@@ -216,6 +216,10 @@ int agfa_get_file_list(CameraPrivateLibrary *dev) {
free(buffer);
return ret;
}
+ if (ret < buflen) {
+ free (buffer);
+ return GP_ERROR_CORRUPTED_DATA;
+ }
if (dev->file_list) free(dev->file_list);