blob: 0f0cfa7804745d675ef1f42302b905f80fb3615b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
From 7df88fc2319852ace202a650703d631200080e3b Mon Sep 17 00:00:00 2001
From: Andrew Murray <radarhere@users.noreply.github.com>
Date: Thu, 30 Jun 2022 12:47:35 +1000
Subject: [PATCH] Added GIF decompression bomb check
Upstream-Status: Backport [https://github.com/python-pillow/Pillow/commit/884437f8a2b953a0abd2a3b130a87fcfb438092e]
CVE: CVE-2022-45198
Signed-off-by: Shubham Kulkarni <skulkarni@mvista.com>
---
src/PIL/GifImagePlugin.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/PIL/GifImagePlugin.py b/src/PIL/GifImagePlugin.py
index 9d8e96f..c477fdd 100644
--- a/src/PIL/GifImagePlugin.py
+++ b/src/PIL/GifImagePlugin.py
@@ -238,6 +238,7 @@ class GifImageFile(ImageFile.ImageFile):
x1, y1 = x0 + i16(s[4:]), y0 + i16(s[6:])
if x1 > self.size[0] or y1 > self.size[1]:
self._size = max(x1, self.size[0]), max(y1, self.size[1])
+ Image._decompression_bomb_check(self._size)
self.dispose_extent = x0, y0, x1, y1
flags = i8(s[8])
--
2.7.4
|
