aleleba/vectorcraft
1
0
Fork 0
mirror of https://github.com/storytold/vectorcraft.git synced 2026-10-25 02:07:09 -06:00
Code Issues Packages Projects Releases Wiki Activity

Security bounds: fix on landing #3936 (see the PR comment)

Browse Source
This commit is contained in:
bflatastic
2026-10-24 17:19:58 +07:00
parent e2a870e602
commit 8a73ed9963
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/color/src/cms/icc.rs
+3 -1
View File
@@ -419,7 +419,9 @@ pub(crate) fn localized_text_fits(bytes: &[u8]) -> bool {
for r in 0..records {
// Each record's header: language, country, length, offset.
let Some(length) = r.checked_mul(12).and_then(|h| be32(tag, h + 16 + 4)) else { break };
total = total.saturating_add(length);
// Each record counts its 12-byte header too: records of length 0 are not free, so
// many tags pointing at one `mluc` can't make this loop quadratic.
total = total.saturating_add(length).saturating_add(12);
if total > MAX_LOCALIZED_TEXT {
return false;
}