diff options
| -rw-r--r-- | libtiff/tif_dirread.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/libtiff/tif_dirread.c b/libtiff/tif_dirread.c index 7756e107..87bc030e 100644 --- a/libtiff/tif_dirread.c +++ b/libtiff/tif_dirread.c @@ -4549,6 +4549,8 @@ EstimateStripByteCounts(TIFF* tif, TIFFDirEntry* dir, uint16 dircount) dp->tdir_type); return -1; } + if( dp->tdir_count > TIFF_UINT64_MAX / typewidth ) + return -1; datasize=(uint64)typewidth*dp->tdir_count; if (!(tif->tif_flags&TIFF_BIGTIFF)) { |