stv0674: add an arbitrary limit to avoid DOS by large allocs (AFL)

1 files changed, 4 insertions, 0 deletions

diff --git a/camlibs/stv0674/stv0674.c b/camlibs/stv0674/stv0674.c
index fe832c63d..398ed5afa 100644
--- a/camlibs/stv0674/stv0674.c
+++ b/camlibs/stv0674/stv0674.c
@@ -107,6 +107,10 @@ static int file_list_func (CameraFilesystem *fs, const char *folder,
 	GP_DEBUG("file count returned %d\n",result);
 	return result;
     }
+    if (count > 10000) { /* arbitrary limit to avoid resource exhaustion by malicious USB */
+	GP_DEBUG("count %d is over 10000 arbitrary limit. Increase if needed.\n", count); 
+	return GP_ERROR_CORRUPTED_DATA;
+    }
 
     GP_DEBUG("count is %x\n",count);