Explorar o código

Merge pull request #625 from turol/afl-fixes

Fix out-of-bounds write on malformed input
Kim Kulling %!s(int64=10) %!d(string=hai) anos
pai
achega
752961edfe
Modificáronse 1 ficheiros con 3 adicións e 0 borrados
  1. 3 0
      code/LWOLoader.cpp

+ 3 - 0
code/LWOLoader.cpp

@@ -954,6 +954,9 @@ inline void LWOImporter::DoRecursiveVMAPAssignment(VMapEntry* base, unsigned int
     LWO::ReferrerList& refList  = mCurLayer->mPointReferrers;
     unsigned int i;
 
+    if (idx >= base->abAssigned.size()) {
+        throw DeadlyImportError("Bad index");
+    }
     base->abAssigned[idx] = true;
     for (i = 0; i < numRead;++i) {
         base->rawData[idx*base->dims+i]= data[i];